Re: Another slab size-32 leak 2.6.16-rc4-mm2

> However, it was intended to collect labels for > message queues during calls to msgget(), msgrcv(), msgsnd(), etc. The > audit_ipc_perms() hook is only collecting labels (and attempted perm > settings) from IPC_SET operations. I talked to Klaus about this and I expect him to pipe in right here... In a nutshell, I was advised back in October that for certification purposes, we're only required to audit ipc operations involving security-relevant permissions checks (similar to our certification requirements on syscall auditing).