On 07/11/2014 09:36 AM, Paul Moore wrote:
Arguably audit is broken anyway by not correctly treating syscall numbers as
32 bit integers like everyone else.
That is really the root cause of the problem. x86 is not the only
architecture with a sparse syscall numbering scheme (in fact the x32
method was based on the MIPS syscall numbering scheme.)
What syscall_get_nr() returns becomes a matter of definition at that point.
-hpa