[RFC] Comments on audit command line failure

William Roberts bill.c.roberts at gmail.com
Tue Jan 7 03:38:02 UTC 2014


I've been doing some testing of the recent audit cmdline patches,
notably as many as the error paths as I can.

On a failure, the field is populated with null, like when key is null.
However, it has quotes, should I drop the quotes...

Example:

Now:
cmdline="(null)" key=(null)

Proposed:
cmdline=(null) key=(null)


I noticed that tty if its null also does not have quotes.

-- 
Respectfully,

William C Roberts




More information about the Linux-audit mailing list