Re: [PATCH 0/6] integrity

From: Mimi Zohar
Date: Thu Feb 05 2009 - 21:29:21 EST


On Fri, 2009-02-06 at 11:00 +1100, James Morris wrote:
> I seem to be getting a bunch of these in my logs with IMA running:
>
> auditd[1746]: dispatch err (Bad address) event lost
>

auditd needs to reflect the integrity definitions defined in
include/linux/audit.h. ausearch-parse needs to be updated as well. For
which version of auditd should I post a patch? I have one for
audit-1.7.9.

Thanks!

Mimi


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/