Re: [PATCH V2] audit: normalize NETFILTER_PKT
On 2017-02-23 12:20, Steve Grubb wrote:
On Wednesday, February 22, 2017 9:50:54 PM EST Richard Guy Briggs
wrote:
> Simplify and eliminate flipping in and out of message fields, relying on
> nfmark the way we do for audit_key.
>
> https://github.com/linux-audit/audit-kernel/issues/11
>
> Signed-off-by: Richard Guy Briggs <rgb(a)redhat.com>
If this is reworked, do you mind including a raw log event in the explanation
part of the patch? I need to see the resulting event to see how user space
needs to adapt.
Yes, I'll make a note to remember to add that.
-Steve
- RGB
--
Richard Guy Briggs <rgb(a)redhat.com>
Kernel Security Engineering, Base Operating Systems, Red Hat
Remote, Ottawa, Canada
Voice: +1.647.777.2635, Internal: (81) 32635