[RFC] Comments on audit command line failure
William Roberts
bill.c.roberts at gmail.com
Tue Jan 7 03:38:02 UTC 2014
I've been doing some testing of the recent audit cmdline patches,
notably as many as the error paths as I can.
On a failure, the field is populated with null, like when key is null.
However, it has quotes, should I drop the quotes...
Example:
Now:
cmdline="(null)" key=(null)
Proposed:
cmdline=(null) key=(null)
I noticed that tty if its null also does not have quotes.
--
Respectfully,
William C Roberts
More information about the Linux-audit
mailing list