11.07.2015 Views

audit

audit

audit

SHOW MORE
SHOW LESS
  • No tags were found...

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

FEAR AND LOATHING IN KERNEL/AUDIT.Cthere can be only oneOnly one process can read from the <strong>audit</strong> netlink socketthis is a good thing - the kernel only has to maintain one bufferCreating a second reader will hijack the first and will not be restored on exitI get it, otherwise the kernel would be required to keep a backlog stack of processes

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!