On 14/03/12, Steve Grubb wrote: > On Tuesday, March 11, 2014 06:15:17 PM Richard Guy Briggs wrote: > > Is zero a valid value for the pid member of the AUDIT_SIGNAL_INFO message? > > Well, pid=0 would be the kernel. So, its valid but unlikely. Offhand I don't > know why the kernel might try sending a signal. Is this a problem?
It isn't a problem. It is a question of trying to understand it and how much effort to code the existing behaviour. > -Steve - RGB -- Richard Guy Briggs <[email protected]> Senior Software Engineer, Kernel Security, AMER ENG Base Operating Systems, Red Hat Remote, Ottawa, Canada Voice: +1.647.777.2635, Internal: (81) 32635, Alt: +1.613.693.0684x3545 -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
