Log corruption

Chris Wright chrisw at osdl.org
Tue May 10 18:10:21 UTC 2005


* Steve Grubb (sgrubb at redhat.com) wrote:
> On Tuesday 10 May 2005 14:01, Chris Wright wrote:
> > Technically, the kernel side is right, and the userspace side should be
> > updated (the nlmsg_len is header, plus data, plus alignment),
> 
> When I was researching it, I found that the original code used the netlink 
> length incorrectly. Your patch was correct...but since someone (before I ever 
> got involved) started us out this way, we cannot change it.
> 

Yeah.  Well, I guess it is changeable (hey, it's only software right?
;-), but I'd fully agree now's not a great time for that.

thanks,
-chris




More information about the Linux-audit mailing list