* RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe
@ 2011-02-24 20:57 ` Justin Mattock
0 siblings, 0 replies; 13+ messages in thread
From: Justin Mattock @ 2011-02-24 20:57 UTC (permalink / raw)
To: SE-Linux; +Cc: Linux Kernel Mailing List
this just popped up..:
[29804.908327] SELinux: Invalid class 3588
[29804.908438] ------------[ cut here ]------------
[29804.908443] kernel BUG at security/selinux/avc.c:162!
[29804.908447] invalid opcode: 0000 [#1] SMP
[29804.908451] last sysfs file: /sys/devices/platform/applesmc.768/light
[29804.908455] CPU 0
[29804.908457] Modules linked in: hidp xfrm4_mode_transport xcbc
rmd160 sha512_generic rfcomm sco bnep l2cap ipt_REJECT xt_tcpudp
ipt_LOG iptable_nat nf_nat xt_state nf_conntrack_ftp nf_conntrack_ipv4
nf_conntrack nf_defrag_ipv4 iptable_filter ip_tables x_tables btusb
bluetooth evdev psmouse thermal fan container button ac battery video
ath9k ath9k_common ath9k_hw ath ttm drm aes_x86_64 lzo zlib ipcomp
xfrm_ipcomp crypto_null sha256_generic cbc des_generic cast5 blowfish
serpent camellia twofish_generic twofish_x86_64 twofish_common ctr ah4
esp4 authenc firewire_ohci firewire_core uhci_hcd ehci_hcd coretemp
acpi_cpufreq processor mperf appletouch applesmc
[29804.908540]
[29804.908544] Pid: 5404, comm: git Not tainted
2.6.38-rc5-00101-gebad2c2 #2 Apple Computer, Inc.
MacBookPro2,2/Mac-F42187C8
[29804.908553] RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>]
avc_audit_post_callback+0xc6/0xfe
[29804.908565] RSP: 0018:ffff880022e01b48 EFLAGS: 00010202
[29804.908569] RAX: 40000000000000c1 RBX: ffff88003d56d330 RCX: ffff880000000018
[29804.908573] RDX: 00000000001e0018 RSI: ffff8800236d4480 RDI: 0000000000000286
[29804.908577] RBP: ffff880022e01b78 R08: ffff88003d402700 R09: ffff8800236d4440
[29804.908581] R10: ffffea0000000008 R11: ffffea00007bfe60 R12: 0000000000000e04
[29804.908585] R13: 00000000be0e08bf R14: 0000000000000109 R15: ffff880022e01db8
[29804.908590] FS: 00007fb829a25700(0000) GS:ffff88003ee00000(0000)
knlGS:0000000000000000
[29804.908594] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[29804.908598] CR2: 000000000046aca0 CR3: 0000000036d9f000 CR4: 00000000000006f0
[29804.908602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[29804.908606] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[29804.908610] Process git (pid: 5404, threadinfo ffff880022e00000,
task ffff88000c686f90)
[29804.908613] Stack:
[29804.908616] ffff8800236d4440 0000002181099d5e ffff88003d56d330
ffff880022e01db8
[29804.908623] ffff8800008d4588 0000000000000e04 ffff880022e01bd8
ffffffff811d3f77
[29804.908630] ffff880022e01cb8 00000000000001b5 0000000000000e04
0000000000000109
[29804.908637] Call Trace:
[29804.908644] [<ffffffff811d3f77>] common_lsm_audit+0x62b/0x642
[29804.908649] [<ffffffff811bdcf1>] avc_audit+0xa3/0xad
[29804.908654] [<ffffffff811be182>] ? avc_has_perm_noaudit+0x21f/0x3a1
[29804.908659] [<ffffffff811be35b>] avc_has_perm+0x57/0x6c
[29804.908665] [<ffffffff811051cc>] ? getname+0x9f/0x1be
[29804.908671] [<ffffffff811bf96f>] inode_has_perm+0x65/0x67
[29804.908677] [<ffffffff810f60a8>] ? __slab_free+0x130/0x145
[29804.908682] [<ffffffff81105124>] ? putname+0x2d/0x36
[29804.908687] [<ffffffff811bfdd1>] selinux_inode_getattr+0x57/0x59
[29804.908692] [<ffffffff811bdcfb>] ? avc_audit_pre_callback+0x0/0x100
[29804.908697] [<ffffffff811bddfb>] ? avc_audit_post_callback+0x0/0xfe
[29804.908702] [<ffffffff810fdf02>] ? cp_new_stat+0x105/0x11b
[29804.908708] [<ffffffff811bca2d>] security_inode_getattr+0x1d/0x1f
[29804.908712] [<ffffffff810fe05c>] vfs_getattr+0x20/0x5e
[29804.908717] [<ffffffff810fe0ea>] vfs_fstatat+0x50/0x67
[29804.908722] [<ffffffff810fe152>] vfs_lstat+0x19/0x1b
[29804.908726] [<ffffffff810fe16e>] sys_newlstat+0x1a/0x38
[29804.908732] [<ffffffff810a022a>] ? audit_syscall_entry+0x178/0x1a4
[29804.908739] [<ffffffff8102d252>] system_call_fastpath+0x16/0x1b
[29804.908742] Code: 46 bb ed ff eb 1e 48 89 df 48 8b 55 d0 48 c7 c6
28 10 5e 81 31 c0 e8 2f bb ed ff 48 8b 7d d0 e8 95 8c f3 ff 66 41 83
fc 31 76 04 <0f> 0b eb fe 48 89 df 45 0f b7 e4 48 c7 c6 f0 34 5e 81 49
ff cc
[29804.908800] RIP [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe
[29804.908806] RSP <ffff880022e01b48>
[29804.908810] ---[ end trace e632c740e8d5733d ]---
full dmesg is here:
http://fpaste.org/VJsZ/
--
Justin P. Mattock
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 13+ messages in thread
* RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe
@ 2011-02-24 20:57 ` Justin Mattock
0 siblings, 0 replies; 13+ messages in thread
From: Justin Mattock @ 2011-02-24 20:57 UTC (permalink / raw)
To: SE-Linux; +Cc: Linux Kernel Mailing List
this just popped up..:
[29804.908327] SELinux: Invalid class 3588
[29804.908438] ------------[ cut here ]------------
[29804.908443] kernel BUG at security/selinux/avc.c:162!
[29804.908447] invalid opcode: 0000 [#1] SMP
[29804.908451] last sysfs file: /sys/devices/platform/applesmc.768/light
[29804.908455] CPU 0
[29804.908457] Modules linked in: hidp xfrm4_mode_transport xcbc
rmd160 sha512_generic rfcomm sco bnep l2cap ipt_REJECT xt_tcpudp
ipt_LOG iptable_nat nf_nat xt_state nf_conntrack_ftp nf_conntrack_ipv4
nf_conntrack nf_defrag_ipv4 iptable_filter ip_tables x_tables btusb
bluetooth evdev psmouse thermal fan container button ac battery video
ath9k ath9k_common ath9k_hw ath ttm drm aes_x86_64 lzo zlib ipcomp
xfrm_ipcomp crypto_null sha256_generic cbc des_generic cast5 blowfish
serpent camellia twofish_generic twofish_x86_64 twofish_common ctr ah4
esp4 authenc firewire_ohci firewire_core uhci_hcd ehci_hcd coretemp
acpi_cpufreq processor mperf appletouch applesmc
[29804.908540]
[29804.908544] Pid: 5404, comm: git Not tainted
2.6.38-rc5-00101-gebad2c2 #2 Apple Computer, Inc.
MacBookPro2,2/Mac-F42187C8
[29804.908553] RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>]
avc_audit_post_callback+0xc6/0xfe
[29804.908565] RSP: 0018:ffff880022e01b48 EFLAGS: 00010202
[29804.908569] RAX: 40000000000000c1 RBX: ffff88003d56d330 RCX: ffff880000000018
[29804.908573] RDX: 00000000001e0018 RSI: ffff8800236d4480 RDI: 0000000000000286
[29804.908577] RBP: ffff880022e01b78 R08: ffff88003d402700 R09: ffff8800236d4440
[29804.908581] R10: ffffea0000000008 R11: ffffea00007bfe60 R12: 0000000000000e04
[29804.908585] R13: 00000000be0e08bf R14: 0000000000000109 R15: ffff880022e01db8
[29804.908590] FS: 00007fb829a25700(0000) GS:ffff88003ee00000(0000)
knlGS:0000000000000000
[29804.908594] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[29804.908598] CR2: 000000000046aca0 CR3: 0000000036d9f000 CR4: 00000000000006f0
[29804.908602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[29804.908606] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[29804.908610] Process git (pid: 5404, threadinfo ffff880022e00000,
task ffff88000c686f90)
[29804.908613] Stack:
[29804.908616] ffff8800236d4440 0000002181099d5e ffff88003d56d330
ffff880022e01db8
[29804.908623] ffff8800008d4588 0000000000000e04 ffff880022e01bd8
ffffffff811d3f77
[29804.908630] ffff880022e01cb8 00000000000001b5 0000000000000e04
0000000000000109
[29804.908637] Call Trace:
[29804.908644] [<ffffffff811d3f77>] common_lsm_audit+0x62b/0x642
[29804.908649] [<ffffffff811bdcf1>] avc_audit+0xa3/0xad
[29804.908654] [<ffffffff811be182>] ? avc_has_perm_noaudit+0x21f/0x3a1
[29804.908659] [<ffffffff811be35b>] avc_has_perm+0x57/0x6c
[29804.908665] [<ffffffff811051cc>] ? getname+0x9f/0x1be
[29804.908671] [<ffffffff811bf96f>] inode_has_perm+0x65/0x67
[29804.908677] [<ffffffff810f60a8>] ? __slab_free+0x130/0x145
[29804.908682] [<ffffffff81105124>] ? putname+0x2d/0x36
[29804.908687] [<ffffffff811bfdd1>] selinux_inode_getattr+0x57/0x59
[29804.908692] [<ffffffff811bdcfb>] ? avc_audit_pre_callback+0x0/0x100
[29804.908697] [<ffffffff811bddfb>] ? avc_audit_post_callback+0x0/0xfe
[29804.908702] [<ffffffff810fdf02>] ? cp_new_stat+0x105/0x11b
[29804.908708] [<ffffffff811bca2d>] security_inode_getattr+0x1d/0x1f
[29804.908712] [<ffffffff810fe05c>] vfs_getattr+0x20/0x5e
[29804.908717] [<ffffffff810fe0ea>] vfs_fstatat+0x50/0x67
[29804.908722] [<ffffffff810fe152>] vfs_lstat+0x19/0x1b
[29804.908726] [<ffffffff810fe16e>] sys_newlstat+0x1a/0x38
[29804.908732] [<ffffffff810a022a>] ? audit_syscall_entry+0x178/0x1a4
[29804.908739] [<ffffffff8102d252>] system_call_fastpath+0x16/0x1b
[29804.908742] Code: 46 bb ed ff eb 1e 48 89 df 48 8b 55 d0 48 c7 c6
28 10 5e 81 31 c0 e8 2f bb ed ff 48 8b 7d d0 e8 95 8c f3 ff 66 41 83
fc 31 76 04 <0f> 0b eb fe 48 89 df 45 0f b7 e4 48 c7 c6 f0 34 5e 81 49
ff cc
[29804.908800] RIP [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe
[29804.908806] RSP <ffff880022e01b48>
[29804.908810] ---[ end trace e632c740e8d5733d ]---
full dmesg is here:
http://fpaste.org/VJsZ/
--
Justin P. Mattock
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe
2011-02-24 20:57 ` Justin Mattock
(?)
@ 2011-02-24 22:51 ` cto
2011-02-25 3:29 ` Eric Paris
2011-02-25 4:16 ` Justin Mattock
-1 siblings, 2 replies; 13+ messages in thread
From: cto @ 2011-02-24 22:51 UTC (permalink / raw)
To: Justin Mattock; +Cc: SE-Linux
Justin,
What Linux Distro have you installed on your MacBookPro2?
it seems, you are not using your standard kernel shipped with your Linux
distribution; if you customized it, what have you added/modified?
Patrick K.
On 2/24/2011 3:57 PM, Justin Mattock wrote:
> this just popped up..:
>
>
> [29804.908327] SELinux: Invalid class 3588
> [29804.908438] ------------[ cut here ]------------
> [29804.908443] kernel BUG at security/selinux/avc.c:162!
> [29804.908447] invalid opcode: 0000 [#1] SMP
> [29804.908451] last sysfs file: /sys/devices/platform/applesmc.768/light
> [29804.908455] CPU 0
> [29804.908457] Modules linked in: hidp xfrm4_mode_transport xcbc
> rmd160 sha512_generic rfcomm sco bnep l2cap ipt_REJECT xt_tcpudp
> ipt_LOG iptable_nat nf_nat xt_state nf_conntrack_ftp nf_conntrack_ipv4
> nf_conntrack nf_defrag_ipv4 iptable_filter ip_tables x_tables btusb
> bluetooth evdev psmouse thermal fan container button ac battery video
> ath9k ath9k_common ath9k_hw ath ttm drm aes_x86_64 lzo zlib ipcomp
> xfrm_ipcomp crypto_null sha256_generic cbc des_generic cast5 blowfish
> serpent camellia twofish_generic twofish_x86_64 twofish_common ctr ah4
> esp4 authenc firewire_ohci firewire_core uhci_hcd ehci_hcd coretemp
> acpi_cpufreq processor mperf appletouch applesmc
> [29804.908540]
> [29804.908544] Pid: 5404, comm: git Not tainted
> 2.6.38-rc5-00101-gebad2c2 #2 Apple Computer, Inc.
> MacBookPro2,2/Mac-F42187C8
> [29804.908553] RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>]
> avc_audit_post_callback+0xc6/0xfe
> [29804.908565] RSP: 0018:ffff880022e01b48 EFLAGS: 00010202
> [29804.908569] RAX: 40000000000000c1 RBX: ffff88003d56d330 RCX: ffff880000000018
> [29804.908573] RDX: 00000000001e0018 RSI: ffff8800236d4480 RDI: 0000000000000286
> [29804.908577] RBP: ffff880022e01b78 R08: ffff88003d402700 R09: ffff8800236d4440
> [29804.908581] R10: ffffea0000000008 R11: ffffea00007bfe60 R12: 0000000000000e04
> [29804.908585] R13: 00000000be0e08bf R14: 0000000000000109 R15: ffff880022e01db8
> [29804.908590] FS: 00007fb829a25700(0000) GS:ffff88003ee00000(0000)
> knlGS:0000000000000000
> [29804.908594] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
> [29804.908598] CR2: 000000000046aca0 CR3: 0000000036d9f000 CR4: 00000000000006f0
> [29804.908602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> [29804.908606] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
> [29804.908610] Process git (pid: 5404, threadinfo ffff880022e00000,
> task ffff88000c686f90)
> [29804.908613] Stack:
> [29804.908616] ffff8800236d4440 0000002181099d5e ffff88003d56d330
> ffff880022e01db8
> [29804.908623] ffff8800008d4588 0000000000000e04 ffff880022e01bd8
> ffffffff811d3f77
> [29804.908630] ffff880022e01cb8 00000000000001b5 0000000000000e04
> 0000000000000109
> [29804.908637] Call Trace:
> [29804.908644] [<ffffffff811d3f77>] common_lsm_audit+0x62b/0x642
> [29804.908649] [<ffffffff811bdcf1>] avc_audit+0xa3/0xad
> [29804.908654] [<ffffffff811be182>] ? avc_has_perm_noaudit+0x21f/0x3a1
> [29804.908659] [<ffffffff811be35b>] avc_has_perm+0x57/0x6c
> [29804.908665] [<ffffffff811051cc>] ? getname+0x9f/0x1be
> [29804.908671] [<ffffffff811bf96f>] inode_has_perm+0x65/0x67
> [29804.908677] [<ffffffff810f60a8>] ? __slab_free+0x130/0x145
> [29804.908682] [<ffffffff81105124>] ? putname+0x2d/0x36
> [29804.908687] [<ffffffff811bfdd1>] selinux_inode_getattr+0x57/0x59
> [29804.908692] [<ffffffff811bdcfb>] ? avc_audit_pre_callback+0x0/0x100
> [29804.908697] [<ffffffff811bddfb>] ? avc_audit_post_callback+0x0/0xfe
> [29804.908702] [<ffffffff810fdf02>] ? cp_new_stat+0x105/0x11b
> [29804.908708] [<ffffffff811bca2d>] security_inode_getattr+0x1d/0x1f
> [29804.908712] [<ffffffff810fe05c>] vfs_getattr+0x20/0x5e
> [29804.908717] [<ffffffff810fe0ea>] vfs_fstatat+0x50/0x67
> [29804.908722] [<ffffffff810fe152>] vfs_lstat+0x19/0x1b
> [29804.908726] [<ffffffff810fe16e>] sys_newlstat+0x1a/0x38
> [29804.908732] [<ffffffff810a022a>] ? audit_syscall_entry+0x178/0x1a4
> [29804.908739] [<ffffffff8102d252>] system_call_fastpath+0x16/0x1b
> [29804.908742] Code: 46 bb ed ff eb 1e 48 89 df 48 8b 55 d0 48 c7 c6
> 28 10 5e 81 31 c0 e8 2f bb ed ff 48 8b 7d d0 e8 95 8c f3 ff 66 41 83
> fc 31 76 04<0f> 0b eb fe 48 89 df 45 0f b7 e4 48 c7 c6 f0 34 5e 81 49
> ff cc
> [29804.908800] RIP [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe
> [29804.908806] RSP<ffff880022e01b48>
> [29804.908810] ---[ end trace e632c740e8d5733d ]---
>
>
> full dmesg is here:
>
> http://fpaste.org/VJsZ/
>
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe
2011-02-24 22:51 ` cto
@ 2011-02-25 3:29 ` Eric Paris
2011-02-25 4:18 ` Justin Mattock
2011-02-25 4:16 ` Justin Mattock
1 sibling, 1 reply; 13+ messages in thread
From: Eric Paris @ 2011-02-25 3:29 UTC (permalink / raw)
To: cto@itechfrontiers.com; +Cc: Justin Mattock, SE-Linux
That's kinda neat. It's the same problem (and the same random
unidentified class 3588) that you reported before.....
It just seems so odd that 3 bits could get flipped like that a second
time, but i'm really quite baffled!
-Eric
On Thu, Feb 24, 2011 at 5:51 PM, cto@itechfrontiers.com
<cto@itechfrontiers.com> wrote:
> Justin,
>
> What Linux Distro have you installed on your MacBookPro2?
>
> it seems, you are not using your standard kernel shipped with your Linux
> distribution; if you customized it, what have you added/modified?
>
>
> Patrick K.
>
> On 2/24/2011 3:57 PM, Justin Mattock wrote:
>>
>> this just popped up..:
>>
>>
>> [29804.908327] SELinux: Invalid class 3588
>> [29804.908438] ------------[ cut here ]------------
>> [29804.908443] kernel BUG at security/selinux/avc.c:162!
>> [29804.908447] invalid opcode: 0000 [#1] SMP
>> [29804.908451] last sysfs file: /sys/devices/platform/applesmc.768/light
>> [29804.908455] CPU 0
>> [29804.908457] Modules linked in: hidp xfrm4_mode_transport xcbc
>> rmd160 sha512_generic rfcomm sco bnep l2cap ipt_REJECT xt_tcpudp
>> ipt_LOG iptable_nat nf_nat xt_state nf_conntrack_ftp nf_conntrack_ipv4
>> nf_conntrack nf_defrag_ipv4 iptable_filter ip_tables x_tables btusb
>> bluetooth evdev psmouse thermal fan container button ac battery video
>> ath9k ath9k_common ath9k_hw ath ttm drm aes_x86_64 lzo zlib ipcomp
>> xfrm_ipcomp crypto_null sha256_generic cbc des_generic cast5 blowfish
>> serpent camellia twofish_generic twofish_x86_64 twofish_common ctr ah4
>> esp4 authenc firewire_ohci firewire_core uhci_hcd ehci_hcd coretemp
>> acpi_cpufreq processor mperf appletouch applesmc
>> [29804.908540]
>> [29804.908544] Pid: 5404, comm: git Not tainted
>> 2.6.38-rc5-00101-gebad2c2 #2 Apple Computer, Inc.
>> MacBookPro2,2/Mac-F42187C8
>> [29804.908553] RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>]
>> avc_audit_post_callback+0xc6/0xfe
>> [29804.908565] RSP: 0018:ffff880022e01b48 EFLAGS: 00010202
>> [29804.908569] RAX: 40000000000000c1 RBX: ffff88003d56d330 RCX:
>> ffff880000000018
>> [29804.908573] RDX: 00000000001e0018 RSI: ffff8800236d4480 RDI:
>> 0000000000000286
>> [29804.908577] RBP: ffff880022e01b78 R08: ffff88003d402700 R09:
>> ffff8800236d4440
>> [29804.908581] R10: ffffea0000000008 R11: ffffea00007bfe60 R12:
>> 0000000000000e04
>> [29804.908585] R13: 00000000be0e08bf R14: 0000000000000109 R15:
>> ffff880022e01db8
>> [29804.908590] FS: 00007fb829a25700(0000) GS:ffff88003ee00000(0000)
>> knlGS:0000000000000000
>> [29804.908594] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
>> [29804.908598] CR2: 000000000046aca0 CR3: 0000000036d9f000 CR4:
>> 00000000000006f0
>> [29804.908602] DR0: 0000000000000000 DR1: 0000000000000000 DR2:
>> 0000000000000000
>> [29804.908606] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7:
>> 0000000000000400
>> [29804.908610] Process git (pid: 5404, threadinfo ffff880022e00000,
>> task ffff88000c686f90)
>> [29804.908613] Stack:
>> [29804.908616] ffff8800236d4440 0000002181099d5e ffff88003d56d330
>> ffff880022e01db8
>> [29804.908623] ffff8800008d4588 0000000000000e04 ffff880022e01bd8
>> ffffffff811d3f77
>> [29804.908630] ffff880022e01cb8 00000000000001b5 0000000000000e04
>> 0000000000000109
>> [29804.908637] Call Trace:
>> [29804.908644] [<ffffffff811d3f77>] common_lsm_audit+0x62b/0x642
>> [29804.908649] [<ffffffff811bdcf1>] avc_audit+0xa3/0xad
>> [29804.908654] [<ffffffff811be182>] ? avc_has_perm_noaudit+0x21f/0x3a1
>> [29804.908659] [<ffffffff811be35b>] avc_has_perm+0x57/0x6c
>> [29804.908665] [<ffffffff811051cc>] ? getname+0x9f/0x1be
>> [29804.908671] [<ffffffff811bf96f>] inode_has_perm+0x65/0x67
>> [29804.908677] [<ffffffff810f60a8>] ? __slab_free+0x130/0x145
>> [29804.908682] [<ffffffff81105124>] ? putname+0x2d/0x36
>> [29804.908687] [<ffffffff811bfdd1>] selinux_inode_getattr+0x57/0x59
>> [29804.908692] [<ffffffff811bdcfb>] ? avc_audit_pre_callback+0x0/0x100
>> [29804.908697] [<ffffffff811bddfb>] ? avc_audit_post_callback+0x0/0xfe
>> [29804.908702] [<ffffffff810fdf02>] ? cp_new_stat+0x105/0x11b
>> [29804.908708] [<ffffffff811bca2d>] security_inode_getattr+0x1d/0x1f
>> [29804.908712] [<ffffffff810fe05c>] vfs_getattr+0x20/0x5e
>> [29804.908717] [<ffffffff810fe0ea>] vfs_fstatat+0x50/0x67
>> [29804.908722] [<ffffffff810fe152>] vfs_lstat+0x19/0x1b
>> [29804.908726] [<ffffffff810fe16e>] sys_newlstat+0x1a/0x38
>> [29804.908732] [<ffffffff810a022a>] ? audit_syscall_entry+0x178/0x1a4
>> [29804.908739] [<ffffffff8102d252>] system_call_fastpath+0x16/0x1b
>> [29804.908742] Code: 46 bb ed ff eb 1e 48 89 df 48 8b 55 d0 48 c7 c6
>> 28 10 5e 81 31 c0 e8 2f bb ed ff 48 8b 7d d0 e8 95 8c f3 ff 66 41 83
>> fc 31 76 04<0f> 0b eb fe 48 89 df 45 0f b7 e4 48 c7 c6 f0 34 5e 81 49
>> ff cc
>> [29804.908800] RIP [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe
>> [29804.908806] RSP<ffff880022e01b48>
>> [29804.908810] ---[ end trace e632c740e8d5733d ]---
>>
>>
>> full dmesg is here:
>>
>> http://fpaste.org/VJsZ/
>>
>
>
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov
> with
> the words "unsubscribe selinux" without quotes as the message.
>
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe
2011-02-24 22:51 ` cto
2011-02-25 3:29 ` Eric Paris
@ 2011-02-25 4:16 ` Justin Mattock
1 sibling, 0 replies; 13+ messages in thread
From: Justin Mattock @ 2011-02-25 4:16 UTC (permalink / raw)
To: cto@itechfrontiers.com; +Cc: SE-Linux
On Feb 24, 2011, at 2:51 PM, cto@itechfrontiers.com wrote:
> Justin,
>
> What Linux Distro have you installed on your MacBookPro2?
>
> it seems, you are not using your standard kernel shipped with your
> Linux distribution; if you customized it, what have you added/
> modified?
>
>
> Patrick K.
it's a custom clfs system..nothing was modified to the policy and/or
kernel.. as for the packages
everything is compiled/built to the instructions as much as
possible(no tweeks)
>
> On 2/24/2011 3:57 PM, Justin Mattock wrote:
>> this just popped up..:
>>
>>
>> [29804.908327] SELinux: Invalid class 3588
>> [29804.908438] ------------[ cut here ]------------
>> [29804.908443] kernel BUG at security/selinux/avc.c:162!
>> [29804.908447] invalid opcode: 0000 [#1] SMP
>> [29804.908451] last sysfs file: /sys/devices/platform/applesmc.768/
>> light
>> [29804.908455] CPU 0
>> [29804.908457] Modules linked in: hidp xfrm4_mode_transport xcbc
>> rmd160 sha512_generic rfcomm sco bnep l2cap ipt_REJECT xt_tcpudp
>> ipt_LOG iptable_nat nf_nat xt_state nf_conntrack_ftp
>> nf_conntrack_ipv4
>> nf_conntrack nf_defrag_ipv4 iptable_filter ip_tables x_tables btusb
>> bluetooth evdev psmouse thermal fan container button ac battery video
>> ath9k ath9k_common ath9k_hw ath ttm drm aes_x86_64 lzo zlib ipcomp
>> xfrm_ipcomp crypto_null sha256_generic cbc des_generic cast5 blowfish
>> serpent camellia twofish_generic twofish_x86_64 twofish_common ctr
>> ah4
>> esp4 authenc firewire_ohci firewire_core uhci_hcd ehci_hcd coretemp
>> acpi_cpufreq processor mperf appletouch applesmc
>> [29804.908540]
>> [29804.908544] Pid: 5404, comm: git Not tainted
>> 2.6.38-rc5-00101-gebad2c2 #2 Apple Computer, Inc.
>> MacBookPro2,2/Mac-F42187C8
>> [29804.908553] RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>]
>> avc_audit_post_callback+0xc6/0xfe
>> [29804.908565] RSP: 0018:ffff880022e01b48 EFLAGS: 00010202
>> [29804.908569] RAX: 40000000000000c1 RBX: ffff88003d56d330 RCX:
>> ffff880000000018
>> [29804.908573] RDX: 00000000001e0018 RSI: ffff8800236d4480 RDI:
>> 0000000000000286
>> [29804.908577] RBP: ffff880022e01b78 R08: ffff88003d402700 R09:
>> ffff8800236d4440
>> [29804.908581] R10: ffffea0000000008 R11: ffffea00007bfe60 R12:
>> 0000000000000e04
>> [29804.908585] R13: 00000000be0e08bf R14: 0000000000000109 R15:
>> ffff880022e01db8
>> [29804.908590] FS: 00007fb829a25700(0000) GS:ffff88003ee00000(0000)
>> knlGS:0000000000000000
>> [29804.908594] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
>> [29804.908598] CR2: 000000000046aca0 CR3: 0000000036d9f000 CR4:
>> 00000000000006f0
>> [29804.908602] DR0: 0000000000000000 DR1: 0000000000000000 DR2:
>> 0000000000000000
>> [29804.908606] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7:
>> 0000000000000400
>> [29804.908610] Process git (pid: 5404, threadinfo ffff880022e00000,
>> task ffff88000c686f90)
>> [29804.908613] Stack:
>> [29804.908616] ffff8800236d4440 0000002181099d5e ffff88003d56d330
>> ffff880022e01db8
>> [29804.908623] ffff8800008d4588 0000000000000e04 ffff880022e01bd8
>> ffffffff811d3f77
>> [29804.908630] ffff880022e01cb8 00000000000001b5 0000000000000e04
>> 0000000000000109
>> [29804.908637] Call Trace:
>> [29804.908644] [<ffffffff811d3f77>] common_lsm_audit+0x62b/0x642
>> [29804.908649] [<ffffffff811bdcf1>] avc_audit+0xa3/0xad
>> [29804.908654] [<ffffffff811be182>] ? avc_has_perm_noaudit+0x21f/
>> 0x3a1
>> [29804.908659] [<ffffffff811be35b>] avc_has_perm+0x57/0x6c
>> [29804.908665] [<ffffffff811051cc>] ? getname+0x9f/0x1be
>> [29804.908671] [<ffffffff811bf96f>] inode_has_perm+0x65/0x67
>> [29804.908677] [<ffffffff810f60a8>] ? __slab_free+0x130/0x145
>> [29804.908682] [<ffffffff81105124>] ? putname+0x2d/0x36
>> [29804.908687] [<ffffffff811bfdd1>] selinux_inode_getattr+0x57/0x59
>> [29804.908692] [<ffffffff811bdcfb>] ? avc_audit_pre_callback
>> +0x0/0x100
>> [29804.908697] [<ffffffff811bddfb>] ? avc_audit_post_callback
>> +0x0/0xfe
>> [29804.908702] [<ffffffff810fdf02>] ? cp_new_stat+0x105/0x11b
>> [29804.908708] [<ffffffff811bca2d>] security_inode_getattr+0x1d/0x1f
>> [29804.908712] [<ffffffff810fe05c>] vfs_getattr+0x20/0x5e
>> [29804.908717] [<ffffffff810fe0ea>] vfs_fstatat+0x50/0x67
>> [29804.908722] [<ffffffff810fe152>] vfs_lstat+0x19/0x1b
>> [29804.908726] [<ffffffff810fe16e>] sys_newlstat+0x1a/0x38
>> [29804.908732] [<ffffffff810a022a>] ? audit_syscall_entry
>> +0x178/0x1a4
>> [29804.908739] [<ffffffff8102d252>] system_call_fastpath+0x16/0x1b
>> [29804.908742] Code: 46 bb ed ff eb 1e 48 89 df 48 8b 55 d0 48 c7 c6
>> 28 10 5e 81 31 c0 e8 2f bb ed ff 48 8b 7d d0 e8 95 8c f3 ff 66 41 83
>> fc 31 76 04<0f> 0b eb fe 48 89 df 45 0f b7 e4 48 c7 c6 f0 34 5e 81
>> 49
>> ff cc
>> [29804.908800] RIP [<ffffffff811bdec1>] avc_audit_post_callback
>> +0xc6/0xfe
>> [29804.908806] RSP<ffff880022e01b48>
>> [29804.908810] ---[ end trace e632c740e8d5733d ]---
>>
>>
>> full dmesg is here:
>>
>> http://fpaste.org/VJsZ/
>>
>
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe
2011-02-25 3:29 ` Eric Paris
@ 2011-02-25 4:18 ` Justin Mattock
0 siblings, 0 replies; 13+ messages in thread
From: Justin Mattock @ 2011-02-25 4:18 UTC (permalink / raw)
To: Eric Paris; +Cc: cto@itechfrontiers.com, SE-Linux
On Feb 24, 2011, at 7:29 PM, Eric Paris wrote:
> That's kinda neat. It's the same problem (and the same random
> unidentified class 3588) that you reported before.....
> It just seems so odd that 3 bits could get flipped like that a second
> time, but i'm really quite baffled!
>
> -Eric
>
>
yeah was thinking the same thing.. thing is, is this happened when I
was fixing
a typo in the kernel and just doing a git commit -s -a (then the below
appeared)
reported to lkml another issue with git maybe this is what's
hitting(guess Ill update to the current
for git, then see if anything like this appears, as well as the other
report..
thanks for taking a look!!
> On Thu, Feb 24, 2011 at 5:51 PM, cto@itechfrontiers.com
> <cto@itechfrontiers.com> wrote:
>> Justin,
>>
>> What Linux Distro have you installed on your MacBookPro2?
>>
>> it seems, you are not using your standard kernel shipped with your
>> Linux
>> distribution; if you customized it, what have you added/modified?
>>
>>
>> Patrick K.
>>
>> On 2/24/2011 3:57 PM, Justin Mattock wrote:
>>>
>>> this just popped up..:
>>>
>>>
>>> [29804.908327] SELinux: Invalid class 3588
>>> [29804.908438] ------------[ cut here ]------------
>>> [29804.908443] kernel BUG at security/selinux/avc.c:162!
>>> [29804.908447] invalid opcode: 0000 [#1] SMP
>>> [29804.908451] last sysfs file: /sys/devices/platform/applesmc.768/
>>> light
>>> [29804.908455] CPU 0
>>> [29804.908457] Modules linked in: hidp xfrm4_mode_transport xcbc
>>> rmd160 sha512_generic rfcomm sco bnep l2cap ipt_REJECT xt_tcpudp
>>> ipt_LOG iptable_nat nf_nat xt_state nf_conntrack_ftp
>>> nf_conntrack_ipv4
>>> nf_conntrack nf_defrag_ipv4 iptable_filter ip_tables x_tables btusb
>>> bluetooth evdev psmouse thermal fan container button ac battery
>>> video
>>> ath9k ath9k_common ath9k_hw ath ttm drm aes_x86_64 lzo zlib ipcomp
>>> xfrm_ipcomp crypto_null sha256_generic cbc des_generic cast5
>>> blowfish
>>> serpent camellia twofish_generic twofish_x86_64 twofish_common ctr
>>> ah4
>>> esp4 authenc firewire_ohci firewire_core uhci_hcd ehci_hcd coretemp
>>> acpi_cpufreq processor mperf appletouch applesmc
>>> [29804.908540]
>>> [29804.908544] Pid: 5404, comm: git Not tainted
>>> 2.6.38-rc5-00101-gebad2c2 #2 Apple Computer, Inc.
>>> MacBookPro2,2/Mac-F42187C8
>>> [29804.908553] RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>]
>>> avc_audit_post_callback+0xc6/0xfe
>>> [29804.908565] RSP: 0018:ffff880022e01b48 EFLAGS: 00010202
>>> [29804.908569] RAX: 40000000000000c1 RBX: ffff88003d56d330 RCX:
>>> ffff880000000018
>>> [29804.908573] RDX: 00000000001e0018 RSI: ffff8800236d4480 RDI:
>>> 0000000000000286
>>> [29804.908577] RBP: ffff880022e01b78 R08: ffff88003d402700 R09:
>>> ffff8800236d4440
>>> [29804.908581] R10: ffffea0000000008 R11: ffffea00007bfe60 R12:
>>> 0000000000000e04
>>> [29804.908585] R13: 00000000be0e08bf R14: 0000000000000109 R15:
>>> ffff880022e01db8
>>> [29804.908590] FS: 00007fb829a25700(0000) GS:ffff88003ee00000(0000)
>>> knlGS:0000000000000000
>>> [29804.908594] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
>>> [29804.908598] CR2: 000000000046aca0 CR3: 0000000036d9f000 CR4:
>>> 00000000000006f0
>>> [29804.908602] DR0: 0000000000000000 DR1: 0000000000000000 DR2:
>>> 0000000000000000
>>> [29804.908606] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7:
>>> 0000000000000400
>>> [29804.908610] Process git (pid: 5404, threadinfo ffff880022e00000,
>>> task ffff88000c686f90)
>>> [29804.908613] Stack:
>>> [29804.908616] ffff8800236d4440 0000002181099d5e ffff88003d56d330
>>> ffff880022e01db8
>>> [29804.908623] ffff8800008d4588 0000000000000e04 ffff880022e01bd8
>>> ffffffff811d3f77
>>> [29804.908630] ffff880022e01cb8 00000000000001b5 0000000000000e04
>>> 0000000000000109
>>> [29804.908637] Call Trace:
>>> [29804.908644] [<ffffffff811d3f77>] common_lsm_audit+0x62b/0x642
>>> [29804.908649] [<ffffffff811bdcf1>] avc_audit+0xa3/0xad
>>> [29804.908654] [<ffffffff811be182>] ? avc_has_perm_noaudit+0x21f/
>>> 0x3a1
>>> [29804.908659] [<ffffffff811be35b>] avc_has_perm+0x57/0x6c
>>> [29804.908665] [<ffffffff811051cc>] ? getname+0x9f/0x1be
>>> [29804.908671] [<ffffffff811bf96f>] inode_has_perm+0x65/0x67
>>> [29804.908677] [<ffffffff810f60a8>] ? __slab_free+0x130/0x145
>>> [29804.908682] [<ffffffff81105124>] ? putname+0x2d/0x36
>>> [29804.908687] [<ffffffff811bfdd1>] selinux_inode_getattr+0x57/0x59
>>> [29804.908692] [<ffffffff811bdcfb>] ? avc_audit_pre_callback
>>> +0x0/0x100
>>> [29804.908697] [<ffffffff811bddfb>] ? avc_audit_post_callback
>>> +0x0/0xfe
>>> [29804.908702] [<ffffffff810fdf02>] ? cp_new_stat+0x105/0x11b
>>> [29804.908708] [<ffffffff811bca2d>] security_inode_getattr+0x1d/
>>> 0x1f
>>> [29804.908712] [<ffffffff810fe05c>] vfs_getattr+0x20/0x5e
>>> [29804.908717] [<ffffffff810fe0ea>] vfs_fstatat+0x50/0x67
>>> [29804.908722] [<ffffffff810fe152>] vfs_lstat+0x19/0x1b
>>> [29804.908726] [<ffffffff810fe16e>] sys_newlstat+0x1a/0x38
>>> [29804.908732] [<ffffffff810a022a>] ? audit_syscall_entry
>>> +0x178/0x1a4
>>> [29804.908739] [<ffffffff8102d252>] system_call_fastpath+0x16/0x1b
>>> [29804.908742] Code: 46 bb ed ff eb 1e 48 89 df 48 8b 55 d0 48 c7 c6
>>> 28 10 5e 81 31 c0 e8 2f bb ed ff 48 8b 7d d0 e8 95 8c f3 ff 66 41 83
>>> fc 31 76 04<0f> 0b eb fe 48 89 df 45 0f b7 e4 48 c7 c6 f0 34 5e
>>> 81 49
>>> ff cc
>>> [29804.908800] RIP [<ffffffff811bdec1>] avc_audit_post_callback
>>> +0xc6/0xfe
>>> [29804.908806] RSP<ffff880022e01b48>
>>> [29804.908810] ---[ end trace e632c740e8d5733d ]---
>>>
>>>
>>> full dmesg is here:
>>>
>>> http://fpaste.org/VJsZ/
>>>
>>
>>
>> --
>> This message was distributed to subscribers of the selinux mailing
>> list.
>> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov
>> with
>> the words "unsubscribe selinux" without quotes as the message.
>>
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe
2011-02-24 20:57 ` Justin Mattock
(?)
(?)
@ 2011-02-25 14:07 ` Stephen Smalley
2011-02-25 17:18 ` Justin Mattock
-1 siblings, 1 reply; 13+ messages in thread
From: Stephen Smalley @ 2011-02-25 14:07 UTC (permalink / raw)
To: Justin Mattock; +Cc: SE-Linux, Eric Paris
On Thu, 2011-02-24 at 12:57 -0800, Justin Mattock wrote:
> this just popped up..:
>
>
> [29804.908327] SELinux: Invalid class 3588
> [29804.908438] ------------[ cut here ]------------
> [29804.908443] kernel BUG at security/selinux/avc.c:162!
It might help debugging to get as much of the AVC message as we can even
in this case, e.g.
diff --git a/security/selinux/avc.c b/security/selinux/avc.c
index 9da6420..8c0ad28 100644
--- a/security/selinux/avc.c
+++ b/security/selinux/avc.c
@@ -111,6 +111,11 @@ static void avc_dump_av(struct audit_buffer *ab, u16 tclass, u32 av)
return;
}
+ if (tclass >= ARRAY_SIZE(secclass_map)) {
+ audit_log_format(ab, " 0x%x", av);
+ return;
+ }
+
perms = secclass_map[tclass-1].perms;
audit_log_format(ab, " {");
@@ -159,8 +164,10 @@ static void avc_dump_query(struct audit_buffer *ab, u32 ssid, u32 tsid, u16 tcla
kfree(scontext);
}
- BUG_ON(tclass >= ARRAY_SIZE(secclass_map));
- audit_log_format(ab, " tclass=%s", secclass_map[tclass-1].name);
+ if (tclass < ARRAY_SIZE(secclass_map))
+ audit_log_format(ab, " tclass=%s", secclass_map[tclass-1].name);
+ else
+ audit_log_format(ab, " tclass=%d", tclass);
}
/**
--
Stephen Smalley
National Security Agency
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply related [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe
2011-02-25 14:07 ` Stephen Smalley
@ 2011-02-25 17:18 ` Justin Mattock
2011-02-26 3:51 ` Ethan Heidrick
2011-03-24 14:01 ` Stephen Smalley
0 siblings, 2 replies; 13+ messages in thread
From: Justin Mattock @ 2011-02-25 17:18 UTC (permalink / raw)
To: Stephen Smalley; +Cc: SE-Linux, Eric Paris
On Feb 25, 2011, at 6:07 AM, Stephen Smalley wrote:
> On Thu, 2011-02-24 at 12:57 -0800, Justin Mattock wrote:
>> this just popped up..:
>>
>>
>> [29804.908327] SELinux: Invalid class 3588
>> [29804.908438] ------------[ cut here ]------------
>> [29804.908443] kernel BUG at security/selinux/avc.c:162!
>
> It might help debugging to get as much of the AVC message as we can
> even
> in this case, e.g.
cool, thanks for the debug patch... I applied it, and will run it to
see if this fires off..
current kernel is: 2.6.38-rc6-00116-g2821f46
>
> diff --git a/security/selinux/avc.c b/security/selinux/avc.c
> index 9da6420..8c0ad28 100644
> --- a/security/selinux/avc.c
> +++ b/security/selinux/avc.c
> @@ -111,6 +111,11 @@ static void avc_dump_av(struct audit_buffer
> *ab, u16 tclass, u32 av)
> return;
> }
>
> + if (tclass >= ARRAY_SIZE(secclass_map)) {
> + audit_log_format(ab, " 0x%x", av);
> + return;
> + }
> +
> perms = secclass_map[tclass-1].perms;
>
> audit_log_format(ab, " {");
> @@ -159,8 +164,10 @@ static void avc_dump_query(struct audit_buffer
> *ab, u32 ssid, u32 tsid, u16 tcla
> kfree(scontext);
> }
>
> - BUG_ON(tclass >= ARRAY_SIZE(secclass_map));
> - audit_log_format(ab, " tclass=%s", secclass_map[tclass-1].name);
> + if (tclass < ARRAY_SIZE(secclass_map))
> + audit_log_format(ab, " tclass=%s", secclass_map[tclass-1].name);
> + else
> + audit_log_format(ab, " tclass=%d", tclass);
> }
>
> /**
>
>
> --
> Stephen Smalley
> National Security Agency
Justin P. Mattock
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe
2011-02-25 17:18 ` Justin Mattock
@ 2011-02-26 3:51 ` Ethan Heidrick
2011-02-26 9:16 ` cto
2011-03-24 14:01 ` Stephen Smalley
1 sibling, 1 reply; 13+ messages in thread
From: Ethan Heidrick @ 2011-02-26 3:51 UTC (permalink / raw)
To: Justin Mattock; +Cc: Stephen Smalley, SE-Linux, Eric Paris
[-- Attachment #1: Type: text/plain, Size: 2545 bytes --]
Hello,
I have a similar question concerning the considerations of applying the
debug patch after implementing SeLinux policies, where return object classes
become invalid when applying tagging to TV data modulation over IP or more
specifically over [selected] cables. The modulation exchange seems to be
creating a buffer value that is not readable on the /sys level and in
structuring bypasses the SeLinux implementation. Is there options regarding
defining these values in policies being conducted?
thanks
ethan
On Fri, Feb 25, 2011 at 9:18 AM, Justin Mattock <justinmattock@gmail.com>wrote:
>
> On Feb 25, 2011, at 6:07 AM, Stephen Smalley wrote:
>
> On Thu, 2011-02-24 at 12:57 -0800, Justin Mattock wrote:
>>
>>> this just popped up..:
>>>
>>>
>>> [29804.908327] SELinux: Invalid class 3588
>>> [29804.908438] ------------[ cut here ]------------
>>> [29804.908443] kernel BUG at security/selinux/avc.c:162!
>>>
>>
>> It might help debugging to get as much of the AVC message as we can even
>> in this case, e.g.
>>
>
> cool, thanks for the debug patch... I applied it, and will run it to see if
> this fires off..
> current kernel is: 2.6.38-rc6-00116-g2821f46
>
>
>
>> diff --git a/security/selinux/avc.c b/security/selinux/avc.c
>> index 9da6420..8c0ad28 100644
>> --- a/security/selinux/avc.c
>> +++ b/security/selinux/avc.c
>> @@ -111,6 +111,11 @@ static void avc_dump_av(struct audit_buffer *ab, u16
>> tclass, u32 av)
>> return;
>> }
>>
>> + if (tclass >= ARRAY_SIZE(secclass_map)) {
>> + audit_log_format(ab, " 0x%x", av);
>> + return;
>> + }
>> +
>> perms = secclass_map[tclass-1].perms;
>>
>> audit_log_format(ab, " {");
>> @@ -159,8 +164,10 @@ static void avc_dump_query(struct audit_buffer *ab,
>> u32 ssid, u32 tsid, u16 tcla
>> kfree(scontext);
>> }
>>
>> - BUG_ON(tclass >= ARRAY_SIZE(secclass_map));
>> - audit_log_format(ab, " tclass=%s", secclass_map[tclass-1].name);
>> + if (tclass < ARRAY_SIZE(secclass_map))
>> + audit_log_format(ab, " tclass=%s", secclass_map[tclass-1].name);
>> + else
>> + audit_log_format(ab, " tclass=%d", tclass);
>> }
>>
>> /**
>>
>>
>> --
>> Stephen Smalley
>> National Security Agency
>>
>
>
> Justin P. Mattock
>
>
>
>
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.govwith
> the words "unsubscribe selinux" without quotes as the message.
>
[-- Attachment #2: Type: text/html, Size: 3618 bytes --]
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe
2011-02-26 3:51 ` Ethan Heidrick
@ 2011-02-26 9:16 ` cto
0 siblings, 0 replies; 13+ messages in thread
From: cto @ 2011-02-26 9:16 UTC (permalink / raw)
To: Ethan Heidrick; +Cc: SE-Linux
Ethan,
For a list of Objects Classes you can assign and work with in SELinux
please refer to this page:
http://selinuxproject.org/page/ObjectClassesPerms
It all comes down to how you tag Video Over IP, in example using udp_socket
Best,
Patrick K.
On 2/25/2011 10:51 PM, Ethan Heidrick wrote:
> Hello,
>
> I have a similar question concerning the considerations of applying the
> debug patch after implementing SeLinux policies, where return object
> classes become invalid when applying tagging to TV data modulation over
> IP or more specifically over [selected] cables. The modulation exchange
> seems to be creating a buffer value that is not readable on the /sys
> level and in structuring bypasses the SeLinux implementation. Is there
> options regarding defining these values in policies being conducted?
>
> thanks
> ethan
>
> On Fri, Feb 25, 2011 at 9:18 AM, Justin Mattock <justinmattock@gmail.com
> <mailto:justinmattock@gmail.com>> wrote:
>
>
> On Feb 25, 2011, at 6:07 AM, Stephen Smalley wrote:
>
> On Thu, 2011-02-24 at 12:57 -0800, Justin Mattock wrote:
>
> this just popped up..:
>
>
> [29804.908327] SELinux: Invalid class 3588
> [29804.908438] ------------[ cut here ]------------
> [29804.908443] kernel BUG at security/selinux/avc.c:162!
>
>
> It might help debugging to get as much of the AVC message as we
> can even
> in this case, e.g.
>
>
> cool, thanks for the debug patch... I applied it, and will run it to
> see if this fires off..
> current kernel is: 2.6.38-rc6-00116-g2821f46
>
>
>
> diff --git a/security/selinux/avc.c b/security/selinux/avc.c
> index 9da6420..8c0ad28 100644
> --- a/security/selinux/avc.c
> +++ b/security/selinux/avc.c
> @@ -111,6 +111,11 @@ static void avc_dump_av(struct audit_buffer
> *ab, u16 tclass, u32 av)
> return;
> }
>
> + if (tclass >= ARRAY_SIZE(secclass_map)) {
> + audit_log_format(ab, " 0x%x", av);
> + return;
> + }
> +
> perms = secclass_map[tclass-1].perms;
>
> audit_log_format(ab, " {");
> @@ -159,8 +164,10 @@ static void avc_dump_query(struct
> audit_buffer *ab, u32 ssid, u32 tsid, u16 tcla
> kfree(scontext);
> }
>
> - BUG_ON(tclass >= ARRAY_SIZE(secclass_map));
> - audit_log_format(ab, " tclass=%s",
> secclass_map[tclass-1].name);
> + if (tclass < ARRAY_SIZE(secclass_map))
> + audit_log_format(ab, " tclass=%s",
> secclass_map[tclass-1].name);
> + else
> + audit_log_format(ab, " tclass=%d", tclass);
> }
>
> /**
>
>
> --
> Stephen Smalley
> National Security Agency
>
>
>
> Justin P. Mattock
>
>
>
>
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to
> majordomo@tycho.nsa.gov <mailto:majordomo@tycho.nsa.gov> with
> the words "unsubscribe selinux" without quotes as the message.
>
>
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe
2011-02-25 17:18 ` Justin Mattock
2011-02-26 3:51 ` Ethan Heidrick
@ 2011-03-24 14:01 ` Stephen Smalley
2011-03-24 16:28 ` Justin P. Mattock
2011-03-24 21:21 ` Justin P. Mattock
1 sibling, 2 replies; 13+ messages in thread
From: Stephen Smalley @ 2011-03-24 14:01 UTC (permalink / raw)
To: Justin Mattock; +Cc: SE-Linux, Eric Paris
On Fri, 2011-02-25 at 09:18 -0800, Justin Mattock wrote:
> On Feb 25, 2011, at 6:07 AM, Stephen Smalley wrote:
>
> > On Thu, 2011-02-24 at 12:57 -0800, Justin Mattock wrote:
> >> this just popped up..:
> >>
> >>
> >> [29804.908327] SELinux: Invalid class 3588
> >> [29804.908438] ------------[ cut here ]------------
> >> [29804.908443] kernel BUG at security/selinux/avc.c:162!
> >
> > It might help debugging to get as much of the AVC message as we can
> > even
> > in this case, e.g.
>
> cool, thanks for the debug patch... I applied it, and will run it to
> see if this fires off..
> current kernel is: 2.6.38-rc6-00116-g2821f46
Did you ever get any output from this debug patch? It would have shown
up as an AVC message with tclass=[0-9]* rather than a class name.
--
Stephen Smalley
National Security Agency
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe
2011-03-24 14:01 ` Stephen Smalley
@ 2011-03-24 16:28 ` Justin P. Mattock
2011-03-24 21:21 ` Justin P. Mattock
1 sibling, 0 replies; 13+ messages in thread
From: Justin P. Mattock @ 2011-03-24 16:28 UTC (permalink / raw)
To: Stephen Smalley; +Cc: SE-Linux, Eric Paris
On 03/24/2011 07:01 AM, Stephen Smalley wrote:
> On Fri, 2011-02-25 at 09:18 -0800, Justin Mattock wrote:
>> On Feb 25, 2011, at 6:07 AM, Stephen Smalley wrote:
>>
>>> On Thu, 2011-02-24 at 12:57 -0800, Justin Mattock wrote:
>>>> this just popped up..:
>>>>
>>>>
>>>> [29804.908327] SELinux: Invalid class 3588
>>>> [29804.908438] ------------[ cut here ]------------
>>>> [29804.908443] kernel BUG at security/selinux/avc.c:162!
>>>
>>> It might help debugging to get as much of the AVC message as we can
>>> even
>>> in this case, e.g.
>>
>> cool, thanks for the debug patch... I applied it, and will run it to
>> see if this fires off..
>> current kernel is: 2.6.38-rc6-00116-g2821f46
>
> Did you ever get any output from this debug patch? It would have shown
> up as an AVC message with tclass=[0-9]* rather than a class name.
>
I had this running with rc4/5/6 etc.. but since the merge window opened
up I have not applied that patch until the window closes.
I can apply it and send you dmesg.
Justin P. Mattock
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe
2011-03-24 14:01 ` Stephen Smalley
2011-03-24 16:28 ` Justin P. Mattock
@ 2011-03-24 21:21 ` Justin P. Mattock
1 sibling, 0 replies; 13+ messages in thread
From: Justin P. Mattock @ 2011-03-24 21:21 UTC (permalink / raw)
To: Stephen Smalley; +Cc: SE-Linux, Eric Paris
On 03/24/2011 07:01 AM, Stephen Smalley wrote:
> On Fri, 2011-02-25 at 09:18 -0800, Justin Mattock wrote:
>> On Feb 25, 2011, at 6:07 AM, Stephen Smalley wrote:
>>
>>> On Thu, 2011-02-24 at 12:57 -0800, Justin Mattock wrote:
>>>> this just popped up..:
>>>>
>>>>
>>>> [29804.908327] SELinux: Invalid class 3588
>>>> [29804.908438] ------------[ cut here ]------------
>>>> [29804.908443] kernel BUG at security/selinux/avc.c:162!
>>>
>>> It might help debugging to get as much of the AVC message as we can
>>> even
>>> in this case, e.g.
>>
>> cool, thanks for the debug patch... I applied it, and will run it to
>> see if this fires off..
>> current kernel is: 2.6.38-rc6-00116-g2821f46
>
> Did you ever get any output from this debug patch? It would have shown
> up as an AVC message with tclass=[0-9]* rather than a class name.
>
I'm looking and havent found the debug avc messge just yet, but I did
apply this patch on top of the current Mainline:
full dmesg for you(Thanks to fedora for providing the fpaste site!!)
http://fpaste.org/U6H3/
Justin P. Mattock
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 13+ messages in thread
end of thread, other threads:[~2011-03-24 21:21 UTC | newest]
Thread overview: 13+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-02-24 20:57 RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe Justin Mattock
2011-02-24 20:57 ` Justin Mattock
2011-02-24 22:51 ` cto
2011-02-25 3:29 ` Eric Paris
2011-02-25 4:18 ` Justin Mattock
2011-02-25 4:16 ` Justin Mattock
2011-02-25 14:07 ` Stephen Smalley
2011-02-25 17:18 ` Justin Mattock
2011-02-26 3:51 ` Ethan Heidrick
2011-02-26 9:16 ` cto
2011-03-24 14:01 ` Stephen Smalley
2011-03-24 16:28 ` Justin P. Mattock
2011-03-24 21:21 ` Justin P. Mattock
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.