Malformed syscall event The saddr field in the AUDIT SOCKAD | Auditing-warroom

Channels

Title

#auditing-warroom

Natalia King

03/07/2019, 6:59 PM

Malformed syscall event. The saddr field in the AUDIT_SOCKADDR record could not be parsed: "00000000000000000000000000000000"

clong

03/07/2019, 7:00 PM

ah this should be unrelated to selinux, probably tied to a socket_event

Natalia King

03/07/2019, 7:00 PM

agreed

View count: 35