Re: [RFC PATCH] audit: make sure we never skip the multicast broadcast

On 2017-06-15 11:29, Paul Moore wrote: > From: Paul Moore <paul(a)paul-moore.com&gt; > > When the auditd connection is reset, either intentionally or due to > a failure, any records that were in the main backlog queue would not > be sent in a multicast broadcast. This patch fixes this problem by > not flushing the main backlog queue on a connection reset, the main > kauditd_thread() will take care of that normally. > > Resolves: https://github.com/linux-audit/audit-kernel/issues/41 > Signed-off-by: Paul Moore <paul(a)paul-moore.com&gt; Looks good to me. Reviewed-by: Richard Guy Briggs <rgb(a)redhat.com&gt;