Re: [PATCH] audit.h: remove the macro AUDIT_ARCH_ARMEB definition

On Wed, Mar 25, 2015 at 5:16 AM, Paul Moore <paul(a)paul-moore.com&gt; wrote: > [NOTE: Adding the linux-arm folks to this thread just in case they are > interested.] > > I'm not an ARM expert, but the kernel #define for AUDIT_ARCH_ARMEB > (below) seems reasonable to me based on the other audit machine > definitions. There is clearly a mismatch between the kernel and the > audit userspace, but I wonder if the issue should be addressed in the > userspace tools. Further, you mention kernel 3.14, what happens with > kernel 3.19 and the most recent audit userspace tools? > > > grep "AUDIT_ARCH_ARMEB" include/uapi/linux/audit.h > #define AUDIT_ARCH_ARMEB (EM_ARM)