Commit 8c5aa40c authored by Steve Grubb's avatar Steve Grubb Committed by David Woodhouse
Browse files

AUDIT: Fix reported length of audit messages. 



We were setting nlmsg_len to skb->len, but we should be subtracting
the size of the header.

From: Steve Grubb <sgrubb@redhat.com>
Signed-off-by: default avatarDavid Woodhouse <dwmw2@infradead.org>
parent ea9c102c

kernel/audit.c

+1 −1
Original line number Diff line number Diff line
@@ -488,7 +488,7 @@ static inline int audit_log_drain(struct audit_buffer *ab) 


		if (audit_pid) {

			struct nlmsghdr *nlh = (struct nlmsghdr *)skb->data;

			nlh->nlmsg_len = skb->len;

			nlh->nlmsg_len = skb->len - sizeof(*nlh);

			skb_get(skb); /* because netlink_* frees */

			retval = netlink_unicast(audit_sock, skb, audit_pid,

						 MSG_DONTWAIT);

CRA Git | Maintained and supported by SUSTech CRA and CCSE