Netlink Socket Problem

Steve Grubb sgrubb at redhat.com
Tue Mar 1 14:59:29 UTC 2005


On Monday 28 February 2005 21:43, Chris Wright wrote:
> It's not all that clear that you want to bind (esp. with pid = 0)
> anyway.

Because netlink is an IPC mechanism, you must bind with nl_pid 0 to make sure 
you are talking to the kernel. The kernel code should only interpret packets 
that have nl_pid set to 0. Any other packets should be discarded perhaps with 
an error to make sure there's no impostors.

> Steve, can you see if this fixes it up for you?

David is building a new kernel for everyone, I'll re-test when its available.

Thanks,
-Steve




More information about the Linux-audit mailing list