Re: get_field_str() and interpret_field() bug with multi-word fields

Steve Grubb
2008-08-12T22:46:03Z

On Tuesday 12 August 2008 18:11:48 John Dennis wrote:
> > With backwards compatibility you don't have to worry about having tools
> > of that era.
> >
>
> This does not address the problem of matching a log file to a kernel
> version

The kernel version is recorded in the daemon startup event.

> nor unanticipated user space provided audit records.

The onus is with the developers to test their work. I did that for all the
audit records I added throughout user space.

-Steve