On Tuesday, March 11, 2014 06:15:17 PM Richard Guy Briggs wrote: > Is zero a valid value for the pid member of the AUDIT_SIGNAL_INFO message?
Well, pid=0 would be the kernel. So, its valid but unlikely. Offhand I don't know why the kernel might try sending a signal. Is this a problem? -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
