On Wed, Mar 25, 2015 at 8:01 AM, Li RongQing <roy.qing.li@xxxxxxxxx> wrote: > On Wed, Mar 25, 2015 at 5:16 AM, Paul Moore <paul@xxxxxxxxxxxxxx> wrote: >> [NOTE: Adding the linux-arm folks to this thread just in case they are >> interested.] >> >> I'm not an ARM expert, but the kernel #define for AUDIT_ARCH_ARMEB >> (below) seems reasonable to me based on the other audit machine >> definitions. There is clearly a mismatch between the kernel and the >> audit userspace, but I wonder if the issue should be addressed in the >> userspace tools. Further, you mention kernel 3.14, what happens with >> kernel 3.19 and the most recent audit userspace tools? >> >> > grep "AUDIT_ARCH_ARMEB" include/uapi/linux/audit.h >> #define AUDIT_ARCH_ARMEB (EM_ARM) > > ping... -Roy -- To unsubscribe from this list: send the line "unsubscribe linux-api" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
