On Sun, 30.11.14 01:09, Zbigniew Jędrzejewski-Szmek ([email protected]) wrote:

> > I think we really should close the fd here. audit is actually really a
> > good example why: the audit kernel side has a logic to pass audit msgs
> > to kmsg if no client is listening¹. If we keep the audit fd open, but
> > don't read from it this would mean the kmsg logic is turned off
> > without anyone ever seeing the audit msgs, which is something we
> > really should avoid I guess... 
> > 
> > Anyway, made the change now to close it. I hope that makes sense.
> Yeah, I was on the fence with closing the socket or not. Closing
> it is probably better for upstream.
> 
> Anyway with F21 and selinux for some reason systemd is not able to
> pass the audit socket to journald. This sounds strange, but it is fairly
> consistent.

What precisely happens? What does "not able" mean?

Lennart

-- 
Lennart Poettering, Red Hat
_______________________________________________
systemd-devel mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/systemd-devel

Reply via email to