From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: [PATCH V2] audit: normalize NETFILTER_PKT Date: Thu, 23 Feb 2017 12:20:05 -0500 Message-ID: <2939836.UGfmiAhj2Z@x2> References: <9504740e9333a0b7074abe0dddfc487aeeae6cff.1487813996.git.rgb@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7Bit Return-path: In-Reply-To: <9504740e9333a0b7074abe0dddfc487aeeae6cff.1487813996.git.rgb@redhat.com> Sender: netfilter-devel-owner@vger.kernel.org To: Richard Guy Briggs Cc: Netfilter Developer Mailing List , linux-audit@redhat.com, Thomas Graf , Eric Paris , Paul Moore List-Id: linux-audit@redhat.com On Wednesday, February 22, 2017 9:50:54 PM EST Richard Guy Briggs wrote: > Simplify and eliminate flipping in and out of message fields, relying on > nfmark the way we do for audit_key. > > https://github.com/linux-audit/audit-kernel/issues/11 > > Signed-off-by: Richard Guy Briggs If this is reworked, do you mind including a raw log event in the explanation part of the patch? I need to see the resulting event to see how user space needs to adapt. Thanks, -Steve