this is a test for an exploit against the kernel  so it makes some assumptions about how the kernel works  the sizes of data structures in the kernel  etc  i can see why this code might use kernel size t  although dan would know better these exploits are more difficult to write if clean code is required dan  we do not allow netlink sockets anymore  right  if so  maybe we should just kill this test entirely  line should be returning for all builds  right 