pid, uid, (int)(nlh->nlmsg_len - ((char *)data - (char *)nlh)), loginuid, (char *)data); 
pid, uid, loginuid, (char *)data); 
static int audit_receive_msg(struct sk_buff *skb, struct nlmsghdr *nlh){	u32			uid, pid, seq;	void			*data;	struct audit_status	*status_get, status_set;	int			err;	struct audit_buffer	*ab;	u16			msg_type = nlh->nlmsg_type;	uid_t			loginuid; /* loginuid of sender */	struct audit_sig_info   sig_data;	err = audit_netlink_ok(NETLINK_CB(skb).eff_cap, msg_type);	if (err)		return err;	/* As soon as there's any sign of userspace auditd, start kauditd to talk to it */	if (!kauditd_task)		kauditd_task = kthread_run(kauditd_thread, NULL, "kauditd");	if (IS_ERR(kauditd_task)) {		err = PTR_ERR(kauditd_task);		kauditd_task = NULL;		return err;	}	pid  = NETLINK_CREDS(skb)->pid;	uid  = NETLINK_CREDS(skb)->uid;	loginuid = NETLINK_CB(skb).loginuid;	seq  = nlh->nlmsg_seq;	data = NLMSG_DATA(nlh);	switch (msg_type) {	case AUDIT_GET:		status_set.enabled	 = audit_enabled;		status_set.failure	 = audit_failure;		status_set.pid		 = audit_pid;		status_set.rate_limit	 = audit_rate_limit;		status_set.backlog_limit = audit_backlog_limit;		status_set.lost		 = atomic_read(&audit_lost);		status_set.backlog	 = skb_queue_len(&audit_skb_queue);		audit_send_reply(NETLINK_CB(skb).pid, seq, AUDIT_GET, 0, 0,				 &status_set, sizeof(status_set));		break;	case AUDIT_SET:		if (nlh->nlmsg_len < sizeof(struct audit_status))			return -EINVAL;		status_get   = (struct audit_status *)data;		if (status_get->mask & AUDIT_STATUS_ENABLED) {			err = audit_set_enabled(status_get->enabled, loginuid);			if (err < 0) return err;		}		if (status_get->mask & AUDIT_STATUS_FAILURE) {			err = audit_set_failure(status_get->failure, loginuid);			if (err < 0) return err;		}		if (status_get->mask & AUDIT_STATUS_PID) {			int old   = audit_pid;			audit_pid = status_get->pid;			audit_log(NULL, AUDIT_CONFIG_CHANGE,				"audit_pid=%d old=%d by auid %u",				  audit_pid, old, loginuid);		}		if (status_get->mask & AUDIT_STATUS_RATE_LIMIT)			audit_set_rate_limit(status_get->rate_limit, loginuid);		if (status_get->mask & AUDIT_STATUS_BACKLOG_LIMIT)			audit_set_backlog_limit(status_get->backlog_limit,							loginuid);		break;	case AUDIT_USER:	case AUDIT_FIRST_USER_MSG...AUDIT_LAST_USER_MSG:		ab = audit_log_start(NULL, msg_type);		if (!ab)			break;	/* audit_panic has been called */		audit_log_format(ab,				 "user pid=%d uid=%d length=%d loginuid=%u"				 " msg='%.1024s'",				 pid, uid,				 (int)(nlh->nlmsg_len				       - ((char *)data - (char *)nlh)),				 loginuid, (char *)data);		audit_set_pid(ab, pid);		audit_log_end(ab);		break;	case AUDIT_ADD:	case AUDIT_DEL:		if (nlh->nlmsg_len < sizeof(struct audit_rule))			return -EINVAL;		/* fallthrough */	case AUDIT_LIST:		err = audit_receive_filter(nlh->nlmsg_type, NETLINK_CB(skb).pid,					   uid, seq, data, loginuid);		break;	case AUDIT_SIGNAL_INFO:		sig_data.uid = audit_sig_uid;		sig_data.pid = audit_sig_pid;		audit_send_reply(NETLINK_CB(skb).pid, seq, AUDIT_SIGNAL_INFO, 				0, 0, &sig_data, sizeof(sig_data));		break;	default:		err = -EINVAL;		break;	}	return err < 0 ? err : 0;}
4520	/local/tlutelli/issta_data/temp/c/2005_temp/2005/4520/326e9c8ba6a149f47e020719b23b24a14ba740d6/audit.c/clean/kernel/audit.c