I’ve been messing around with Linux auditing lately, because of reasons, and ended up having to replicate most of libaudit, because of other reasons, and in the process I found bugs in both the kernel and userspace parts of the Linux audit subsystem.
Continue reading “Netlink, auditing, and counting bytes”Netlink, auditing, and counting bytes
In which we find bugs in both the kernel and userspace parts of the Linux audit subsystem.