Richard Guy Briggs <[email protected]> wrote: > > Perhaps I'm missing something here, but let me ask again, how does > > userspace distinguish between an unset nfmark and a nfmark of > > 0xffffffff? > > It can't.
It can if you log it as 0, as I asked in patch 1 review. (You wouldn't log sk uid of 0 as -1 either, would you?) -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
