Log corruption
Chris Wright
chrisw at osdl.org
Tue May 10 18:10:21 UTC 2005
* Steve Grubb (sgrubb at redhat.com) wrote:
> On Tuesday 10 May 2005 14:01, Chris Wright wrote:
> > Technically, the kernel side is right, and the userspace side should be
> > updated (the nlmsg_len is header, plus data, plus alignment),
>
> When I was researching it, I found that the original code used the netlink
> length incorrectly. Your patch was correct...but since someone (before I ever
> got involved) started us out this way, we cannot change it.
>
Yeah. Well, I guess it is changeable (hey, it's only software right?
;-), but I'd fully agree now's not a great time for that.
thanks,
-chris
More information about the Linux-audit
mailing list