HI,
I have read source code in Audit-1.6.5 about auditd part. I looked up into functions
equeue_event(),event_thread_main() in Auditd-event.c,get_reply(),send_audit_event() and
main function in Auditd.c. I don't know why it must use a list (auditd_reply_list)
here. It seems rep->next is never be used and it's null so that the else branch of
if (consumer_data.head == NULL) in equeue_event() will never be reached.
I feel unsure about above codes. Am I wrong?
Regards
Chu Li