From mboxrd@z Thu Jan  1 00:00:00 1970
From: Klaus Weidner <klaus@atsec.com>
Subject: Re: auditctl question
Date: Thu, 3 Aug 2006 15:29:20 -0500
Message-ID: <20060803202920.GD5964@w-m-p.com>
References: <20060731171437.GA447@clif.cflynt.com>
	<20060731200523.GA1183@clif.cflynt.com>
	<200607311713.57472.sgrubb@redhat.com>
	<1154551742.6710.65.camel@willipl1-ld1.jhuapl.edu>
	<20060803002207.GB5964@w-m-p.com>
	<17B584B5C0638745ADF6002331331FDFA7D6F0@aplesliberty.dom1.jhuapl.edu>
	<20060803151814.GC5964@w-m-p.com>
	<17B584B5C0638745ADF6002331331FDFA7D6F1@aplesliberty.dom1.jhuapl.edu>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Return-path: <linux-audit-bounces@redhat.com>
Received: from mx3.redhat.com (mx3.redhat.com [172.16.48.32])
	by int-mx1.corp.redhat.com (8.12.11.20060308/8.12.11) with ESMTP id
	k73KTb21015709
	for <linux-audit@redhat.com>; Thu, 3 Aug 2006 16:29:37 -0400
Received: from mail.atsec.com (mail.atsec.com [195.30.252.105])
	by mx3.redhat.com (8.13.1/8.13.1) with ESMTP id k73KTU8E019719
	for <linux-audit@redhat.com>; Thu, 3 Aug 2006 16:29:30 -0400
Content-Disposition: inline
In-Reply-To: <17B584B5C0638745ADF6002331331FDFA7D6F1@aplesliberty.dom1.jhuapl.edu>
List-Unsubscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: "Williams, P. Lane" <Lane.Williams@jhuapl.edu>
Cc: linux-audit@redhat.com
List-Id: linux-audit@redhat.com

On Thu, Aug 03, 2006 at 04:02:56PM -0400, Williams, P. Lane wrote:
> I installed the 2.6.17.7 kernel and then tried to build audit-1.2.5 and=
 received the following...
>=20
> make[2]: Entering directory `/tmp/audit/audit-1.2.5/src'
> gcc -D_REENTRANT -D_GNU_SOURCE -g -O2 -o auditd -pie -Wl,-z -Wl,relro a=
uditd-auditd.o auditd-auditd-event.o auditd-auditd-config.o auditd-auditd=
-reconfig.o auditd-auditd-sendmail.o auditd-auditd-dispatch.o  -lpthread =
-L/tmp/audit/audit-1.2.5/src/mt -lauditmt
> gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I../lib   -D_REENTRANT -D_GNU_SO=
URCE -g -O2 -c auditctl.c
> auditctl.c: In function =91audit_print_reply=92:
> auditctl.c:1046: error: =91AUDIT_SE_USER=92 undeclared (first use in th=
is function)
> auditctl.c:1046: error: (Each undeclared identifier is reported only on=
ce
> auditctl.c:1046: error: for each function it appears in.)
> auditctl.c:1047: error: =91AUDIT_SE_CLR=92 undeclared (first use in thi=
s function)
>=20
> I also received the same error with the other kernel.  I did not build =
the SE-Linux stuff into the kernel, should I have?

Audit should not require SELinux, but I don't think it currently gets
much testing with SELinux turned off which can cause such build issues.
Steve, do you have a fix for this?

-Klaus