On Wednesday 17 May 2006 13:19, Amy Griffis wrote: > Except that audit_getstatus uses netlink. The failure that the app is > querying about is a netlink socket failure, so trying to use the > netlink socket to determine the failure action wouldn't make a lot of > sense.
We can look at errno and be smart about it. If errno is EPROTONOSUPPORT or EAFNOSUPPORT, all we need to do is ignore the error since these mean that the kernel does not have the support compiled in. EPERM should probably be considered deny the operation. Anything else we can call audit_request_status. -Steve -- redhat-lspp mailing list [email protected] https://www.redhat.com/mailman/listinfo/redhat-lspp
