* RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe @ 2011-02-24 20:57 ` Justin Mattock 0 siblings, 0 replies; 13+ messages in thread From: Justin Mattock @ 2011-02-24 20:57 UTC (permalink / raw) To: SE-Linux; +Cc: Linux Kernel Mailing List this just popped up..: [29804.908327] SELinux: Invalid class 3588 [29804.908438] ------------[ cut here ]------------ [29804.908443] kernel BUG at security/selinux/avc.c:162! [29804.908447] invalid opcode: 0000 [#1] SMP [29804.908451] last sysfs file: /sys/devices/platform/applesmc.768/light [29804.908455] CPU 0 [29804.908457] Modules linked in: hidp xfrm4_mode_transport xcbc rmd160 sha512_generic rfcomm sco bnep l2cap ipt_REJECT xt_tcpudp ipt_LOG iptable_nat nf_nat xt_state nf_conntrack_ftp nf_conntrack_ipv4 nf_conntrack nf_defrag_ipv4 iptable_filter ip_tables x_tables btusb bluetooth evdev psmouse thermal fan container button ac battery video ath9k ath9k_common ath9k_hw ath ttm drm aes_x86_64 lzo zlib ipcomp xfrm_ipcomp crypto_null sha256_generic cbc des_generic cast5 blowfish serpent camellia twofish_generic twofish_x86_64 twofish_common ctr ah4 esp4 authenc firewire_ohci firewire_core uhci_hcd ehci_hcd coretemp acpi_cpufreq processor mperf appletouch applesmc [29804.908540] [29804.908544] Pid: 5404, comm: git Not tainted 2.6.38-rc5-00101-gebad2c2 #2 Apple Computer, Inc. MacBookPro2,2/Mac-F42187C8 [29804.908553] RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe [29804.908565] RSP: 0018:ffff880022e01b48 EFLAGS: 00010202 [29804.908569] RAX: 40000000000000c1 RBX: ffff88003d56d330 RCX: ffff880000000018 [29804.908573] RDX: 00000000001e0018 RSI: ffff8800236d4480 RDI: 0000000000000286 [29804.908577] RBP: ffff880022e01b78 R08: ffff88003d402700 R09: ffff8800236d4440 [29804.908581] R10: ffffea0000000008 R11: ffffea00007bfe60 R12: 0000000000000e04 [29804.908585] R13: 00000000be0e08bf R14: 0000000000000109 R15: ffff880022e01db8 [29804.908590] FS: 00007fb829a25700(0000) GS:ffff88003ee00000(0000) knlGS:0000000000000000 [29804.908594] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b [29804.908598] CR2: 000000000046aca0 CR3: 0000000036d9f000 CR4: 00000000000006f0 [29804.908602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [29804.908606] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [29804.908610] Process git (pid: 5404, threadinfo ffff880022e00000, task ffff88000c686f90) [29804.908613] Stack: [29804.908616] ffff8800236d4440 0000002181099d5e ffff88003d56d330 ffff880022e01db8 [29804.908623] ffff8800008d4588 0000000000000e04 ffff880022e01bd8 ffffffff811d3f77 [29804.908630] ffff880022e01cb8 00000000000001b5 0000000000000e04 0000000000000109 [29804.908637] Call Trace: [29804.908644] [<ffffffff811d3f77>] common_lsm_audit+0x62b/0x642 [29804.908649] [<ffffffff811bdcf1>] avc_audit+0xa3/0xad [29804.908654] [<ffffffff811be182>] ? avc_has_perm_noaudit+0x21f/0x3a1 [29804.908659] [<ffffffff811be35b>] avc_has_perm+0x57/0x6c [29804.908665] [<ffffffff811051cc>] ? getname+0x9f/0x1be [29804.908671] [<ffffffff811bf96f>] inode_has_perm+0x65/0x67 [29804.908677] [<ffffffff810f60a8>] ? __slab_free+0x130/0x145 [29804.908682] [<ffffffff81105124>] ? putname+0x2d/0x36 [29804.908687] [<ffffffff811bfdd1>] selinux_inode_getattr+0x57/0x59 [29804.908692] [<ffffffff811bdcfb>] ? avc_audit_pre_callback+0x0/0x100 [29804.908697] [<ffffffff811bddfb>] ? avc_audit_post_callback+0x0/0xfe [29804.908702] [<ffffffff810fdf02>] ? cp_new_stat+0x105/0x11b [29804.908708] [<ffffffff811bca2d>] security_inode_getattr+0x1d/0x1f [29804.908712] [<ffffffff810fe05c>] vfs_getattr+0x20/0x5e [29804.908717] [<ffffffff810fe0ea>] vfs_fstatat+0x50/0x67 [29804.908722] [<ffffffff810fe152>] vfs_lstat+0x19/0x1b [29804.908726] [<ffffffff810fe16e>] sys_newlstat+0x1a/0x38 [29804.908732] [<ffffffff810a022a>] ? audit_syscall_entry+0x178/0x1a4 [29804.908739] [<ffffffff8102d252>] system_call_fastpath+0x16/0x1b [29804.908742] Code: 46 bb ed ff eb 1e 48 89 df 48 8b 55 d0 48 c7 c6 28 10 5e 81 31 c0 e8 2f bb ed ff 48 8b 7d d0 e8 95 8c f3 ff 66 41 83 fc 31 76 04 <0f> 0b eb fe 48 89 df 45 0f b7 e4 48 c7 c6 f0 34 5e 81 49 ff cc [29804.908800] RIP [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe [29804.908806] RSP <ffff880022e01b48> [29804.908810] ---[ end trace e632c740e8d5733d ]--- full dmesg is here: http://fpaste.org/VJsZ/ -- Justin P. Mattock -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 13+ messages in thread
* RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe @ 2011-02-24 20:57 ` Justin Mattock 0 siblings, 0 replies; 13+ messages in thread From: Justin Mattock @ 2011-02-24 20:57 UTC (permalink / raw) To: SE-Linux; +Cc: Linux Kernel Mailing List this just popped up..: [29804.908327] SELinux: Invalid class 3588 [29804.908438] ------------[ cut here ]------------ [29804.908443] kernel BUG at security/selinux/avc.c:162! [29804.908447] invalid opcode: 0000 [#1] SMP [29804.908451] last sysfs file: /sys/devices/platform/applesmc.768/light [29804.908455] CPU 0 [29804.908457] Modules linked in: hidp xfrm4_mode_transport xcbc rmd160 sha512_generic rfcomm sco bnep l2cap ipt_REJECT xt_tcpudp ipt_LOG iptable_nat nf_nat xt_state nf_conntrack_ftp nf_conntrack_ipv4 nf_conntrack nf_defrag_ipv4 iptable_filter ip_tables x_tables btusb bluetooth evdev psmouse thermal fan container button ac battery video ath9k ath9k_common ath9k_hw ath ttm drm aes_x86_64 lzo zlib ipcomp xfrm_ipcomp crypto_null sha256_generic cbc des_generic cast5 blowfish serpent camellia twofish_generic twofish_x86_64 twofish_common ctr ah4 esp4 authenc firewire_ohci firewire_core uhci_hcd ehci_hcd coretemp acpi_cpufreq processor mperf appletouch applesmc [29804.908540] [29804.908544] Pid: 5404, comm: git Not tainted 2.6.38-rc5-00101-gebad2c2 #2 Apple Computer, Inc. MacBookPro2,2/Mac-F42187C8 [29804.908553] RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe [29804.908565] RSP: 0018:ffff880022e01b48 EFLAGS: 00010202 [29804.908569] RAX: 40000000000000c1 RBX: ffff88003d56d330 RCX: ffff880000000018 [29804.908573] RDX: 00000000001e0018 RSI: ffff8800236d4480 RDI: 0000000000000286 [29804.908577] RBP: ffff880022e01b78 R08: ffff88003d402700 R09: ffff8800236d4440 [29804.908581] R10: ffffea0000000008 R11: ffffea00007bfe60 R12: 0000000000000e04 [29804.908585] R13: 00000000be0e08bf R14: 0000000000000109 R15: ffff880022e01db8 [29804.908590] FS: 00007fb829a25700(0000) GS:ffff88003ee00000(0000) knlGS:0000000000000000 [29804.908594] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b [29804.908598] CR2: 000000000046aca0 CR3: 0000000036d9f000 CR4: 00000000000006f0 [29804.908602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [29804.908606] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [29804.908610] Process git (pid: 5404, threadinfo ffff880022e00000, task ffff88000c686f90) [29804.908613] Stack: [29804.908616] ffff8800236d4440 0000002181099d5e ffff88003d56d330 ffff880022e01db8 [29804.908623] ffff8800008d4588 0000000000000e04 ffff880022e01bd8 ffffffff811d3f77 [29804.908630] ffff880022e01cb8 00000000000001b5 0000000000000e04 0000000000000109 [29804.908637] Call Trace: [29804.908644] [<ffffffff811d3f77>] common_lsm_audit+0x62b/0x642 [29804.908649] [<ffffffff811bdcf1>] avc_audit+0xa3/0xad [29804.908654] [<ffffffff811be182>] ? avc_has_perm_noaudit+0x21f/0x3a1 [29804.908659] [<ffffffff811be35b>] avc_has_perm+0x57/0x6c [29804.908665] [<ffffffff811051cc>] ? getname+0x9f/0x1be [29804.908671] [<ffffffff811bf96f>] inode_has_perm+0x65/0x67 [29804.908677] [<ffffffff810f60a8>] ? __slab_free+0x130/0x145 [29804.908682] [<ffffffff81105124>] ? putname+0x2d/0x36 [29804.908687] [<ffffffff811bfdd1>] selinux_inode_getattr+0x57/0x59 [29804.908692] [<ffffffff811bdcfb>] ? avc_audit_pre_callback+0x0/0x100 [29804.908697] [<ffffffff811bddfb>] ? avc_audit_post_callback+0x0/0xfe [29804.908702] [<ffffffff810fdf02>] ? cp_new_stat+0x105/0x11b [29804.908708] [<ffffffff811bca2d>] security_inode_getattr+0x1d/0x1f [29804.908712] [<ffffffff810fe05c>] vfs_getattr+0x20/0x5e [29804.908717] [<ffffffff810fe0ea>] vfs_fstatat+0x50/0x67 [29804.908722] [<ffffffff810fe152>] vfs_lstat+0x19/0x1b [29804.908726] [<ffffffff810fe16e>] sys_newlstat+0x1a/0x38 [29804.908732] [<ffffffff810a022a>] ? audit_syscall_entry+0x178/0x1a4 [29804.908739] [<ffffffff8102d252>] system_call_fastpath+0x16/0x1b [29804.908742] Code: 46 bb ed ff eb 1e 48 89 df 48 8b 55 d0 48 c7 c6 28 10 5e 81 31 c0 e8 2f bb ed ff 48 8b 7d d0 e8 95 8c f3 ff 66 41 83 fc 31 76 04 <0f> 0b eb fe 48 89 df 45 0f b7 e4 48 c7 c6 f0 34 5e 81 49 ff cc [29804.908800] RIP [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe [29804.908806] RSP <ffff880022e01b48> [29804.908810] ---[ end trace e632c740e8d5733d ]--- full dmesg is here: http://fpaste.org/VJsZ/ -- Justin P. Mattock ^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe 2011-02-24 20:57 ` Justin Mattock (?) @ 2011-02-24 22:51 ` cto 2011-02-25 3:29 ` Eric Paris 2011-02-25 4:16 ` Justin Mattock -1 siblings, 2 replies; 13+ messages in thread From: cto @ 2011-02-24 22:51 UTC (permalink / raw) To: Justin Mattock; +Cc: SE-Linux Justin, What Linux Distro have you installed on your MacBookPro2? it seems, you are not using your standard kernel shipped with your Linux distribution; if you customized it, what have you added/modified? Patrick K. On 2/24/2011 3:57 PM, Justin Mattock wrote: > this just popped up..: > > > [29804.908327] SELinux: Invalid class 3588 > [29804.908438] ------------[ cut here ]------------ > [29804.908443] kernel BUG at security/selinux/avc.c:162! > [29804.908447] invalid opcode: 0000 [#1] SMP > [29804.908451] last sysfs file: /sys/devices/platform/applesmc.768/light > [29804.908455] CPU 0 > [29804.908457] Modules linked in: hidp xfrm4_mode_transport xcbc > rmd160 sha512_generic rfcomm sco bnep l2cap ipt_REJECT xt_tcpudp > ipt_LOG iptable_nat nf_nat xt_state nf_conntrack_ftp nf_conntrack_ipv4 > nf_conntrack nf_defrag_ipv4 iptable_filter ip_tables x_tables btusb > bluetooth evdev psmouse thermal fan container button ac battery video > ath9k ath9k_common ath9k_hw ath ttm drm aes_x86_64 lzo zlib ipcomp > xfrm_ipcomp crypto_null sha256_generic cbc des_generic cast5 blowfish > serpent camellia twofish_generic twofish_x86_64 twofish_common ctr ah4 > esp4 authenc firewire_ohci firewire_core uhci_hcd ehci_hcd coretemp > acpi_cpufreq processor mperf appletouch applesmc > [29804.908540] > [29804.908544] Pid: 5404, comm: git Not tainted > 2.6.38-rc5-00101-gebad2c2 #2 Apple Computer, Inc. > MacBookPro2,2/Mac-F42187C8 > [29804.908553] RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] > avc_audit_post_callback+0xc6/0xfe > [29804.908565] RSP: 0018:ffff880022e01b48 EFLAGS: 00010202 > [29804.908569] RAX: 40000000000000c1 RBX: ffff88003d56d330 RCX: ffff880000000018 > [29804.908573] RDX: 00000000001e0018 RSI: ffff8800236d4480 RDI: 0000000000000286 > [29804.908577] RBP: ffff880022e01b78 R08: ffff88003d402700 R09: ffff8800236d4440 > [29804.908581] R10: ffffea0000000008 R11: ffffea00007bfe60 R12: 0000000000000e04 > [29804.908585] R13: 00000000be0e08bf R14: 0000000000000109 R15: ffff880022e01db8 > [29804.908590] FS: 00007fb829a25700(0000) GS:ffff88003ee00000(0000) > knlGS:0000000000000000 > [29804.908594] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b > [29804.908598] CR2: 000000000046aca0 CR3: 0000000036d9f000 CR4: 00000000000006f0 > [29804.908602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > [29804.908606] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 > [29804.908610] Process git (pid: 5404, threadinfo ffff880022e00000, > task ffff88000c686f90) > [29804.908613] Stack: > [29804.908616] ffff8800236d4440 0000002181099d5e ffff88003d56d330 > ffff880022e01db8 > [29804.908623] ffff8800008d4588 0000000000000e04 ffff880022e01bd8 > ffffffff811d3f77 > [29804.908630] ffff880022e01cb8 00000000000001b5 0000000000000e04 > 0000000000000109 > [29804.908637] Call Trace: > [29804.908644] [<ffffffff811d3f77>] common_lsm_audit+0x62b/0x642 > [29804.908649] [<ffffffff811bdcf1>] avc_audit+0xa3/0xad > [29804.908654] [<ffffffff811be182>] ? avc_has_perm_noaudit+0x21f/0x3a1 > [29804.908659] [<ffffffff811be35b>] avc_has_perm+0x57/0x6c > [29804.908665] [<ffffffff811051cc>] ? getname+0x9f/0x1be > [29804.908671] [<ffffffff811bf96f>] inode_has_perm+0x65/0x67 > [29804.908677] [<ffffffff810f60a8>] ? __slab_free+0x130/0x145 > [29804.908682] [<ffffffff81105124>] ? putname+0x2d/0x36 > [29804.908687] [<ffffffff811bfdd1>] selinux_inode_getattr+0x57/0x59 > [29804.908692] [<ffffffff811bdcfb>] ? avc_audit_pre_callback+0x0/0x100 > [29804.908697] [<ffffffff811bddfb>] ? avc_audit_post_callback+0x0/0xfe > [29804.908702] [<ffffffff810fdf02>] ? cp_new_stat+0x105/0x11b > [29804.908708] [<ffffffff811bca2d>] security_inode_getattr+0x1d/0x1f > [29804.908712] [<ffffffff810fe05c>] vfs_getattr+0x20/0x5e > [29804.908717] [<ffffffff810fe0ea>] vfs_fstatat+0x50/0x67 > [29804.908722] [<ffffffff810fe152>] vfs_lstat+0x19/0x1b > [29804.908726] [<ffffffff810fe16e>] sys_newlstat+0x1a/0x38 > [29804.908732] [<ffffffff810a022a>] ? audit_syscall_entry+0x178/0x1a4 > [29804.908739] [<ffffffff8102d252>] system_call_fastpath+0x16/0x1b > [29804.908742] Code: 46 bb ed ff eb 1e 48 89 df 48 8b 55 d0 48 c7 c6 > 28 10 5e 81 31 c0 e8 2f bb ed ff 48 8b 7d d0 e8 95 8c f3 ff 66 41 83 > fc 31 76 04<0f> 0b eb fe 48 89 df 45 0f b7 e4 48 c7 c6 f0 34 5e 81 49 > ff cc > [29804.908800] RIP [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe > [29804.908806] RSP<ffff880022e01b48> > [29804.908810] ---[ end trace e632c740e8d5733d ]--- > > > full dmesg is here: > > http://fpaste.org/VJsZ/ > -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe 2011-02-24 22:51 ` cto @ 2011-02-25 3:29 ` Eric Paris 2011-02-25 4:18 ` Justin Mattock 2011-02-25 4:16 ` Justin Mattock 1 sibling, 1 reply; 13+ messages in thread From: Eric Paris @ 2011-02-25 3:29 UTC (permalink / raw) To: cto@itechfrontiers.com; +Cc: Justin Mattock, SE-Linux That's kinda neat. It's the same problem (and the same random unidentified class 3588) that you reported before..... It just seems so odd that 3 bits could get flipped like that a second time, but i'm really quite baffled! -Eric On Thu, Feb 24, 2011 at 5:51 PM, cto@itechfrontiers.com <cto@itechfrontiers.com> wrote: > Justin, > > What Linux Distro have you installed on your MacBookPro2? > > it seems, you are not using your standard kernel shipped with your Linux > distribution; if you customized it, what have you added/modified? > > > Patrick K. > > On 2/24/2011 3:57 PM, Justin Mattock wrote: >> >> this just popped up..: >> >> >> [29804.908327] SELinux: Invalid class 3588 >> [29804.908438] ------------[ cut here ]------------ >> [29804.908443] kernel BUG at security/selinux/avc.c:162! >> [29804.908447] invalid opcode: 0000 [#1] SMP >> [29804.908451] last sysfs file: /sys/devices/platform/applesmc.768/light >> [29804.908455] CPU 0 >> [29804.908457] Modules linked in: hidp xfrm4_mode_transport xcbc >> rmd160 sha512_generic rfcomm sco bnep l2cap ipt_REJECT xt_tcpudp >> ipt_LOG iptable_nat nf_nat xt_state nf_conntrack_ftp nf_conntrack_ipv4 >> nf_conntrack nf_defrag_ipv4 iptable_filter ip_tables x_tables btusb >> bluetooth evdev psmouse thermal fan container button ac battery video >> ath9k ath9k_common ath9k_hw ath ttm drm aes_x86_64 lzo zlib ipcomp >> xfrm_ipcomp crypto_null sha256_generic cbc des_generic cast5 blowfish >> serpent camellia twofish_generic twofish_x86_64 twofish_common ctr ah4 >> esp4 authenc firewire_ohci firewire_core uhci_hcd ehci_hcd coretemp >> acpi_cpufreq processor mperf appletouch applesmc >> [29804.908540] >> [29804.908544] Pid: 5404, comm: git Not tainted >> 2.6.38-rc5-00101-gebad2c2 #2 Apple Computer, Inc. >> MacBookPro2,2/Mac-F42187C8 >> [29804.908553] RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] >> avc_audit_post_callback+0xc6/0xfe >> [29804.908565] RSP: 0018:ffff880022e01b48 EFLAGS: 00010202 >> [29804.908569] RAX: 40000000000000c1 RBX: ffff88003d56d330 RCX: >> ffff880000000018 >> [29804.908573] RDX: 00000000001e0018 RSI: ffff8800236d4480 RDI: >> 0000000000000286 >> [29804.908577] RBP: ffff880022e01b78 R08: ffff88003d402700 R09: >> ffff8800236d4440 >> [29804.908581] R10: ffffea0000000008 R11: ffffea00007bfe60 R12: >> 0000000000000e04 >> [29804.908585] R13: 00000000be0e08bf R14: 0000000000000109 R15: >> ffff880022e01db8 >> [29804.908590] FS: 00007fb829a25700(0000) GS:ffff88003ee00000(0000) >> knlGS:0000000000000000 >> [29804.908594] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b >> [29804.908598] CR2: 000000000046aca0 CR3: 0000000036d9f000 CR4: >> 00000000000006f0 >> [29804.908602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: >> 0000000000000000 >> [29804.908606] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: >> 0000000000000400 >> [29804.908610] Process git (pid: 5404, threadinfo ffff880022e00000, >> task ffff88000c686f90) >> [29804.908613] Stack: >> [29804.908616] ffff8800236d4440 0000002181099d5e ffff88003d56d330 >> ffff880022e01db8 >> [29804.908623] ffff8800008d4588 0000000000000e04 ffff880022e01bd8 >> ffffffff811d3f77 >> [29804.908630] ffff880022e01cb8 00000000000001b5 0000000000000e04 >> 0000000000000109 >> [29804.908637] Call Trace: >> [29804.908644] [<ffffffff811d3f77>] common_lsm_audit+0x62b/0x642 >> [29804.908649] [<ffffffff811bdcf1>] avc_audit+0xa3/0xad >> [29804.908654] [<ffffffff811be182>] ? avc_has_perm_noaudit+0x21f/0x3a1 >> [29804.908659] [<ffffffff811be35b>] avc_has_perm+0x57/0x6c >> [29804.908665] [<ffffffff811051cc>] ? getname+0x9f/0x1be >> [29804.908671] [<ffffffff811bf96f>] inode_has_perm+0x65/0x67 >> [29804.908677] [<ffffffff810f60a8>] ? __slab_free+0x130/0x145 >> [29804.908682] [<ffffffff81105124>] ? putname+0x2d/0x36 >> [29804.908687] [<ffffffff811bfdd1>] selinux_inode_getattr+0x57/0x59 >> [29804.908692] [<ffffffff811bdcfb>] ? avc_audit_pre_callback+0x0/0x100 >> [29804.908697] [<ffffffff811bddfb>] ? avc_audit_post_callback+0x0/0xfe >> [29804.908702] [<ffffffff810fdf02>] ? cp_new_stat+0x105/0x11b >> [29804.908708] [<ffffffff811bca2d>] security_inode_getattr+0x1d/0x1f >> [29804.908712] [<ffffffff810fe05c>] vfs_getattr+0x20/0x5e >> [29804.908717] [<ffffffff810fe0ea>] vfs_fstatat+0x50/0x67 >> [29804.908722] [<ffffffff810fe152>] vfs_lstat+0x19/0x1b >> [29804.908726] [<ffffffff810fe16e>] sys_newlstat+0x1a/0x38 >> [29804.908732] [<ffffffff810a022a>] ? audit_syscall_entry+0x178/0x1a4 >> [29804.908739] [<ffffffff8102d252>] system_call_fastpath+0x16/0x1b >> [29804.908742] Code: 46 bb ed ff eb 1e 48 89 df 48 8b 55 d0 48 c7 c6 >> 28 10 5e 81 31 c0 e8 2f bb ed ff 48 8b 7d d0 e8 95 8c f3 ff 66 41 83 >> fc 31 76 04<0f> 0b eb fe 48 89 df 45 0f b7 e4 48 c7 c6 f0 34 5e 81 49 >> ff cc >> [29804.908800] RIP [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe >> [29804.908806] RSP<ffff880022e01b48> >> [29804.908810] ---[ end trace e632c740e8d5733d ]--- >> >> >> full dmesg is here: >> >> http://fpaste.org/VJsZ/ >> > > > -- > This message was distributed to subscribers of the selinux mailing list. > If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov > with > the words "unsubscribe selinux" without quotes as the message. > -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe 2011-02-25 3:29 ` Eric Paris @ 2011-02-25 4:18 ` Justin Mattock 0 siblings, 0 replies; 13+ messages in thread From: Justin Mattock @ 2011-02-25 4:18 UTC (permalink / raw) To: Eric Paris; +Cc: cto@itechfrontiers.com, SE-Linux On Feb 24, 2011, at 7:29 PM, Eric Paris wrote: > That's kinda neat. It's the same problem (and the same random > unidentified class 3588) that you reported before..... > It just seems so odd that 3 bits could get flipped like that a second > time, but i'm really quite baffled! > > -Eric > > yeah was thinking the same thing.. thing is, is this happened when I was fixing a typo in the kernel and just doing a git commit -s -a (then the below appeared) reported to lkml another issue with git maybe this is what's hitting(guess Ill update to the current for git, then see if anything like this appears, as well as the other report.. thanks for taking a look!! > On Thu, Feb 24, 2011 at 5:51 PM, cto@itechfrontiers.com > <cto@itechfrontiers.com> wrote: >> Justin, >> >> What Linux Distro have you installed on your MacBookPro2? >> >> it seems, you are not using your standard kernel shipped with your >> Linux >> distribution; if you customized it, what have you added/modified? >> >> >> Patrick K. >> >> On 2/24/2011 3:57 PM, Justin Mattock wrote: >>> >>> this just popped up..: >>> >>> >>> [29804.908327] SELinux: Invalid class 3588 >>> [29804.908438] ------------[ cut here ]------------ >>> [29804.908443] kernel BUG at security/selinux/avc.c:162! >>> [29804.908447] invalid opcode: 0000 [#1] SMP >>> [29804.908451] last sysfs file: /sys/devices/platform/applesmc.768/ >>> light >>> [29804.908455] CPU 0 >>> [29804.908457] Modules linked in: hidp xfrm4_mode_transport xcbc >>> rmd160 sha512_generic rfcomm sco bnep l2cap ipt_REJECT xt_tcpudp >>> ipt_LOG iptable_nat nf_nat xt_state nf_conntrack_ftp >>> nf_conntrack_ipv4 >>> nf_conntrack nf_defrag_ipv4 iptable_filter ip_tables x_tables btusb >>> bluetooth evdev psmouse thermal fan container button ac battery >>> video >>> ath9k ath9k_common ath9k_hw ath ttm drm aes_x86_64 lzo zlib ipcomp >>> xfrm_ipcomp crypto_null sha256_generic cbc des_generic cast5 >>> blowfish >>> serpent camellia twofish_generic twofish_x86_64 twofish_common ctr >>> ah4 >>> esp4 authenc firewire_ohci firewire_core uhci_hcd ehci_hcd coretemp >>> acpi_cpufreq processor mperf appletouch applesmc >>> [29804.908540] >>> [29804.908544] Pid: 5404, comm: git Not tainted >>> 2.6.38-rc5-00101-gebad2c2 #2 Apple Computer, Inc. >>> MacBookPro2,2/Mac-F42187C8 >>> [29804.908553] RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] >>> avc_audit_post_callback+0xc6/0xfe >>> [29804.908565] RSP: 0018:ffff880022e01b48 EFLAGS: 00010202 >>> [29804.908569] RAX: 40000000000000c1 RBX: ffff88003d56d330 RCX: >>> ffff880000000018 >>> [29804.908573] RDX: 00000000001e0018 RSI: ffff8800236d4480 RDI: >>> 0000000000000286 >>> [29804.908577] RBP: ffff880022e01b78 R08: ffff88003d402700 R09: >>> ffff8800236d4440 >>> [29804.908581] R10: ffffea0000000008 R11: ffffea00007bfe60 R12: >>> 0000000000000e04 >>> [29804.908585] R13: 00000000be0e08bf R14: 0000000000000109 R15: >>> ffff880022e01db8 >>> [29804.908590] FS: 00007fb829a25700(0000) GS:ffff88003ee00000(0000) >>> knlGS:0000000000000000 >>> [29804.908594] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b >>> [29804.908598] CR2: 000000000046aca0 CR3: 0000000036d9f000 CR4: >>> 00000000000006f0 >>> [29804.908602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: >>> 0000000000000000 >>> [29804.908606] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: >>> 0000000000000400 >>> [29804.908610] Process git (pid: 5404, threadinfo ffff880022e00000, >>> task ffff88000c686f90) >>> [29804.908613] Stack: >>> [29804.908616] ffff8800236d4440 0000002181099d5e ffff88003d56d330 >>> ffff880022e01db8 >>> [29804.908623] ffff8800008d4588 0000000000000e04 ffff880022e01bd8 >>> ffffffff811d3f77 >>> [29804.908630] ffff880022e01cb8 00000000000001b5 0000000000000e04 >>> 0000000000000109 >>> [29804.908637] Call Trace: >>> [29804.908644] [<ffffffff811d3f77>] common_lsm_audit+0x62b/0x642 >>> [29804.908649] [<ffffffff811bdcf1>] avc_audit+0xa3/0xad >>> [29804.908654] [<ffffffff811be182>] ? avc_has_perm_noaudit+0x21f/ >>> 0x3a1 >>> [29804.908659] [<ffffffff811be35b>] avc_has_perm+0x57/0x6c >>> [29804.908665] [<ffffffff811051cc>] ? getname+0x9f/0x1be >>> [29804.908671] [<ffffffff811bf96f>] inode_has_perm+0x65/0x67 >>> [29804.908677] [<ffffffff810f60a8>] ? __slab_free+0x130/0x145 >>> [29804.908682] [<ffffffff81105124>] ? putname+0x2d/0x36 >>> [29804.908687] [<ffffffff811bfdd1>] selinux_inode_getattr+0x57/0x59 >>> [29804.908692] [<ffffffff811bdcfb>] ? avc_audit_pre_callback >>> +0x0/0x100 >>> [29804.908697] [<ffffffff811bddfb>] ? avc_audit_post_callback >>> +0x0/0xfe >>> [29804.908702] [<ffffffff810fdf02>] ? cp_new_stat+0x105/0x11b >>> [29804.908708] [<ffffffff811bca2d>] security_inode_getattr+0x1d/ >>> 0x1f >>> [29804.908712] [<ffffffff810fe05c>] vfs_getattr+0x20/0x5e >>> [29804.908717] [<ffffffff810fe0ea>] vfs_fstatat+0x50/0x67 >>> [29804.908722] [<ffffffff810fe152>] vfs_lstat+0x19/0x1b >>> [29804.908726] [<ffffffff810fe16e>] sys_newlstat+0x1a/0x38 >>> [29804.908732] [<ffffffff810a022a>] ? audit_syscall_entry >>> +0x178/0x1a4 >>> [29804.908739] [<ffffffff8102d252>] system_call_fastpath+0x16/0x1b >>> [29804.908742] Code: 46 bb ed ff eb 1e 48 89 df 48 8b 55 d0 48 c7 c6 >>> 28 10 5e 81 31 c0 e8 2f bb ed ff 48 8b 7d d0 e8 95 8c f3 ff 66 41 83 >>> fc 31 76 04<0f> 0b eb fe 48 89 df 45 0f b7 e4 48 c7 c6 f0 34 5e >>> 81 49 >>> ff cc >>> [29804.908800] RIP [<ffffffff811bdec1>] avc_audit_post_callback >>> +0xc6/0xfe >>> [29804.908806] RSP<ffff880022e01b48> >>> [29804.908810] ---[ end trace e632c740e8d5733d ]--- >>> >>> >>> full dmesg is here: >>> >>> http://fpaste.org/VJsZ/ >>> >> >> >> -- >> This message was distributed to subscribers of the selinux mailing >> list. >> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov >> with >> the words "unsubscribe selinux" without quotes as the message. >> -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe 2011-02-24 22:51 ` cto 2011-02-25 3:29 ` Eric Paris @ 2011-02-25 4:16 ` Justin Mattock 1 sibling, 0 replies; 13+ messages in thread From: Justin Mattock @ 2011-02-25 4:16 UTC (permalink / raw) To: cto@itechfrontiers.com; +Cc: SE-Linux On Feb 24, 2011, at 2:51 PM, cto@itechfrontiers.com wrote: > Justin, > > What Linux Distro have you installed on your MacBookPro2? > > it seems, you are not using your standard kernel shipped with your > Linux distribution; if you customized it, what have you added/ > modified? > > > Patrick K. it's a custom clfs system..nothing was modified to the policy and/or kernel.. as for the packages everything is compiled/built to the instructions as much as possible(no tweeks) > > On 2/24/2011 3:57 PM, Justin Mattock wrote: >> this just popped up..: >> >> >> [29804.908327] SELinux: Invalid class 3588 >> [29804.908438] ------------[ cut here ]------------ >> [29804.908443] kernel BUG at security/selinux/avc.c:162! >> [29804.908447] invalid opcode: 0000 [#1] SMP >> [29804.908451] last sysfs file: /sys/devices/platform/applesmc.768/ >> light >> [29804.908455] CPU 0 >> [29804.908457] Modules linked in: hidp xfrm4_mode_transport xcbc >> rmd160 sha512_generic rfcomm sco bnep l2cap ipt_REJECT xt_tcpudp >> ipt_LOG iptable_nat nf_nat xt_state nf_conntrack_ftp >> nf_conntrack_ipv4 >> nf_conntrack nf_defrag_ipv4 iptable_filter ip_tables x_tables btusb >> bluetooth evdev psmouse thermal fan container button ac battery video >> ath9k ath9k_common ath9k_hw ath ttm drm aes_x86_64 lzo zlib ipcomp >> xfrm_ipcomp crypto_null sha256_generic cbc des_generic cast5 blowfish >> serpent camellia twofish_generic twofish_x86_64 twofish_common ctr >> ah4 >> esp4 authenc firewire_ohci firewire_core uhci_hcd ehci_hcd coretemp >> acpi_cpufreq processor mperf appletouch applesmc >> [29804.908540] >> [29804.908544] Pid: 5404, comm: git Not tainted >> 2.6.38-rc5-00101-gebad2c2 #2 Apple Computer, Inc. >> MacBookPro2,2/Mac-F42187C8 >> [29804.908553] RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] >> avc_audit_post_callback+0xc6/0xfe >> [29804.908565] RSP: 0018:ffff880022e01b48 EFLAGS: 00010202 >> [29804.908569] RAX: 40000000000000c1 RBX: ffff88003d56d330 RCX: >> ffff880000000018 >> [29804.908573] RDX: 00000000001e0018 RSI: ffff8800236d4480 RDI: >> 0000000000000286 >> [29804.908577] RBP: ffff880022e01b78 R08: ffff88003d402700 R09: >> ffff8800236d4440 >> [29804.908581] R10: ffffea0000000008 R11: ffffea00007bfe60 R12: >> 0000000000000e04 >> [29804.908585] R13: 00000000be0e08bf R14: 0000000000000109 R15: >> ffff880022e01db8 >> [29804.908590] FS: 00007fb829a25700(0000) GS:ffff88003ee00000(0000) >> knlGS:0000000000000000 >> [29804.908594] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b >> [29804.908598] CR2: 000000000046aca0 CR3: 0000000036d9f000 CR4: >> 00000000000006f0 >> [29804.908602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: >> 0000000000000000 >> [29804.908606] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: >> 0000000000000400 >> [29804.908610] Process git (pid: 5404, threadinfo ffff880022e00000, >> task ffff88000c686f90) >> [29804.908613] Stack: >> [29804.908616] ffff8800236d4440 0000002181099d5e ffff88003d56d330 >> ffff880022e01db8 >> [29804.908623] ffff8800008d4588 0000000000000e04 ffff880022e01bd8 >> ffffffff811d3f77 >> [29804.908630] ffff880022e01cb8 00000000000001b5 0000000000000e04 >> 0000000000000109 >> [29804.908637] Call Trace: >> [29804.908644] [<ffffffff811d3f77>] common_lsm_audit+0x62b/0x642 >> [29804.908649] [<ffffffff811bdcf1>] avc_audit+0xa3/0xad >> [29804.908654] [<ffffffff811be182>] ? avc_has_perm_noaudit+0x21f/ >> 0x3a1 >> [29804.908659] [<ffffffff811be35b>] avc_has_perm+0x57/0x6c >> [29804.908665] [<ffffffff811051cc>] ? getname+0x9f/0x1be >> [29804.908671] [<ffffffff811bf96f>] inode_has_perm+0x65/0x67 >> [29804.908677] [<ffffffff810f60a8>] ? __slab_free+0x130/0x145 >> [29804.908682] [<ffffffff81105124>] ? putname+0x2d/0x36 >> [29804.908687] [<ffffffff811bfdd1>] selinux_inode_getattr+0x57/0x59 >> [29804.908692] [<ffffffff811bdcfb>] ? avc_audit_pre_callback >> +0x0/0x100 >> [29804.908697] [<ffffffff811bddfb>] ? avc_audit_post_callback >> +0x0/0xfe >> [29804.908702] [<ffffffff810fdf02>] ? cp_new_stat+0x105/0x11b >> [29804.908708] [<ffffffff811bca2d>] security_inode_getattr+0x1d/0x1f >> [29804.908712] [<ffffffff810fe05c>] vfs_getattr+0x20/0x5e >> [29804.908717] [<ffffffff810fe0ea>] vfs_fstatat+0x50/0x67 >> [29804.908722] [<ffffffff810fe152>] vfs_lstat+0x19/0x1b >> [29804.908726] [<ffffffff810fe16e>] sys_newlstat+0x1a/0x38 >> [29804.908732] [<ffffffff810a022a>] ? audit_syscall_entry >> +0x178/0x1a4 >> [29804.908739] [<ffffffff8102d252>] system_call_fastpath+0x16/0x1b >> [29804.908742] Code: 46 bb ed ff eb 1e 48 89 df 48 8b 55 d0 48 c7 c6 >> 28 10 5e 81 31 c0 e8 2f bb ed ff 48 8b 7d d0 e8 95 8c f3 ff 66 41 83 >> fc 31 76 04<0f> 0b eb fe 48 89 df 45 0f b7 e4 48 c7 c6 f0 34 5e 81 >> 49 >> ff cc >> [29804.908800] RIP [<ffffffff811bdec1>] avc_audit_post_callback >> +0xc6/0xfe >> [29804.908806] RSP<ffff880022e01b48> >> [29804.908810] ---[ end trace e632c740e8d5733d ]--- >> >> >> full dmesg is here: >> >> http://fpaste.org/VJsZ/ >> > -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe 2011-02-24 20:57 ` Justin Mattock (?) (?) @ 2011-02-25 14:07 ` Stephen Smalley 2011-02-25 17:18 ` Justin Mattock -1 siblings, 1 reply; 13+ messages in thread From: Stephen Smalley @ 2011-02-25 14:07 UTC (permalink / raw) To: Justin Mattock; +Cc: SE-Linux, Eric Paris On Thu, 2011-02-24 at 12:57 -0800, Justin Mattock wrote: > this just popped up..: > > > [29804.908327] SELinux: Invalid class 3588 > [29804.908438] ------------[ cut here ]------------ > [29804.908443] kernel BUG at security/selinux/avc.c:162! It might help debugging to get as much of the AVC message as we can even in this case, e.g. diff --git a/security/selinux/avc.c b/security/selinux/avc.c index 9da6420..8c0ad28 100644 --- a/security/selinux/avc.c +++ b/security/selinux/avc.c @@ -111,6 +111,11 @@ static void avc_dump_av(struct audit_buffer *ab, u16 tclass, u32 av) return; } + if (tclass >= ARRAY_SIZE(secclass_map)) { + audit_log_format(ab, " 0x%x", av); + return; + } + perms = secclass_map[tclass-1].perms; audit_log_format(ab, " {"); @@ -159,8 +164,10 @@ static void avc_dump_query(struct audit_buffer *ab, u32 ssid, u32 tsid, u16 tcla kfree(scontext); } - BUG_ON(tclass >= ARRAY_SIZE(secclass_map)); - audit_log_format(ab, " tclass=%s", secclass_map[tclass-1].name); + if (tclass < ARRAY_SIZE(secclass_map)) + audit_log_format(ab, " tclass=%s", secclass_map[tclass-1].name); + else + audit_log_format(ab, " tclass=%d", tclass); } /** -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply related [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe 2011-02-25 14:07 ` Stephen Smalley @ 2011-02-25 17:18 ` Justin Mattock 2011-02-26 3:51 ` Ethan Heidrick 2011-03-24 14:01 ` Stephen Smalley 0 siblings, 2 replies; 13+ messages in thread From: Justin Mattock @ 2011-02-25 17:18 UTC (permalink / raw) To: Stephen Smalley; +Cc: SE-Linux, Eric Paris On Feb 25, 2011, at 6:07 AM, Stephen Smalley wrote: > On Thu, 2011-02-24 at 12:57 -0800, Justin Mattock wrote: >> this just popped up..: >> >> >> [29804.908327] SELinux: Invalid class 3588 >> [29804.908438] ------------[ cut here ]------------ >> [29804.908443] kernel BUG at security/selinux/avc.c:162! > > It might help debugging to get as much of the AVC message as we can > even > in this case, e.g. cool, thanks for the debug patch... I applied it, and will run it to see if this fires off.. current kernel is: 2.6.38-rc6-00116-g2821f46 > > diff --git a/security/selinux/avc.c b/security/selinux/avc.c > index 9da6420..8c0ad28 100644 > --- a/security/selinux/avc.c > +++ b/security/selinux/avc.c > @@ -111,6 +111,11 @@ static void avc_dump_av(struct audit_buffer > *ab, u16 tclass, u32 av) > return; > } > > + if (tclass >= ARRAY_SIZE(secclass_map)) { > + audit_log_format(ab, " 0x%x", av); > + return; > + } > + > perms = secclass_map[tclass-1].perms; > > audit_log_format(ab, " {"); > @@ -159,8 +164,10 @@ static void avc_dump_query(struct audit_buffer > *ab, u32 ssid, u32 tsid, u16 tcla > kfree(scontext); > } > > - BUG_ON(tclass >= ARRAY_SIZE(secclass_map)); > - audit_log_format(ab, " tclass=%s", secclass_map[tclass-1].name); > + if (tclass < ARRAY_SIZE(secclass_map)) > + audit_log_format(ab, " tclass=%s", secclass_map[tclass-1].name); > + else > + audit_log_format(ab, " tclass=%d", tclass); > } > > /** > > > -- > Stephen Smalley > National Security Agency Justin P. Mattock -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe 2011-02-25 17:18 ` Justin Mattock @ 2011-02-26 3:51 ` Ethan Heidrick 2011-02-26 9:16 ` cto 2011-03-24 14:01 ` Stephen Smalley 1 sibling, 1 reply; 13+ messages in thread From: Ethan Heidrick @ 2011-02-26 3:51 UTC (permalink / raw) To: Justin Mattock; +Cc: Stephen Smalley, SE-Linux, Eric Paris [-- Attachment #1: Type: text/plain, Size: 2545 bytes --] Hello, I have a similar question concerning the considerations of applying the debug patch after implementing SeLinux policies, where return object classes become invalid when applying tagging to TV data modulation over IP or more specifically over [selected] cables. The modulation exchange seems to be creating a buffer value that is not readable on the /sys level and in structuring bypasses the SeLinux implementation. Is there options regarding defining these values in policies being conducted? thanks ethan On Fri, Feb 25, 2011 at 9:18 AM, Justin Mattock <justinmattock@gmail.com>wrote: > > On Feb 25, 2011, at 6:07 AM, Stephen Smalley wrote: > > On Thu, 2011-02-24 at 12:57 -0800, Justin Mattock wrote: >> >>> this just popped up..: >>> >>> >>> [29804.908327] SELinux: Invalid class 3588 >>> [29804.908438] ------------[ cut here ]------------ >>> [29804.908443] kernel BUG at security/selinux/avc.c:162! >>> >> >> It might help debugging to get as much of the AVC message as we can even >> in this case, e.g. >> > > cool, thanks for the debug patch... I applied it, and will run it to see if > this fires off.. > current kernel is: 2.6.38-rc6-00116-g2821f46 > > > >> diff --git a/security/selinux/avc.c b/security/selinux/avc.c >> index 9da6420..8c0ad28 100644 >> --- a/security/selinux/avc.c >> +++ b/security/selinux/avc.c >> @@ -111,6 +111,11 @@ static void avc_dump_av(struct audit_buffer *ab, u16 >> tclass, u32 av) >> return; >> } >> >> + if (tclass >= ARRAY_SIZE(secclass_map)) { >> + audit_log_format(ab, " 0x%x", av); >> + return; >> + } >> + >> perms = secclass_map[tclass-1].perms; >> >> audit_log_format(ab, " {"); >> @@ -159,8 +164,10 @@ static void avc_dump_query(struct audit_buffer *ab, >> u32 ssid, u32 tsid, u16 tcla >> kfree(scontext); >> } >> >> - BUG_ON(tclass >= ARRAY_SIZE(secclass_map)); >> - audit_log_format(ab, " tclass=%s", secclass_map[tclass-1].name); >> + if (tclass < ARRAY_SIZE(secclass_map)) >> + audit_log_format(ab, " tclass=%s", secclass_map[tclass-1].name); >> + else >> + audit_log_format(ab, " tclass=%d", tclass); >> } >> >> /** >> >> >> -- >> Stephen Smalley >> National Security Agency >> > > > Justin P. Mattock > > > > > -- > This message was distributed to subscribers of the selinux mailing list. > If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.govwith > the words "unsubscribe selinux" without quotes as the message. > [-- Attachment #2: Type: text/html, Size: 3618 bytes --] ^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe 2011-02-26 3:51 ` Ethan Heidrick @ 2011-02-26 9:16 ` cto 0 siblings, 0 replies; 13+ messages in thread From: cto @ 2011-02-26 9:16 UTC (permalink / raw) To: Ethan Heidrick; +Cc: SE-Linux Ethan, For a list of Objects Classes you can assign and work with in SELinux please refer to this page: http://selinuxproject.org/page/ObjectClassesPerms It all comes down to how you tag Video Over IP, in example using udp_socket Best, Patrick K. On 2/25/2011 10:51 PM, Ethan Heidrick wrote: > Hello, > > I have a similar question concerning the considerations of applying the > debug patch after implementing SeLinux policies, where return object > classes become invalid when applying tagging to TV data modulation over > IP or more specifically over [selected] cables. The modulation exchange > seems to be creating a buffer value that is not readable on the /sys > level and in structuring bypasses the SeLinux implementation. Is there > options regarding defining these values in policies being conducted? > > thanks > ethan > > On Fri, Feb 25, 2011 at 9:18 AM, Justin Mattock <justinmattock@gmail.com > <mailto:justinmattock@gmail.com>> wrote: > > > On Feb 25, 2011, at 6:07 AM, Stephen Smalley wrote: > > On Thu, 2011-02-24 at 12:57 -0800, Justin Mattock wrote: > > this just popped up..: > > > [29804.908327] SELinux: Invalid class 3588 > [29804.908438] ------------[ cut here ]------------ > [29804.908443] kernel BUG at security/selinux/avc.c:162! > > > It might help debugging to get as much of the AVC message as we > can even > in this case, e.g. > > > cool, thanks for the debug patch... I applied it, and will run it to > see if this fires off.. > current kernel is: 2.6.38-rc6-00116-g2821f46 > > > > diff --git a/security/selinux/avc.c b/security/selinux/avc.c > index 9da6420..8c0ad28 100644 > --- a/security/selinux/avc.c > +++ b/security/selinux/avc.c > @@ -111,6 +111,11 @@ static void avc_dump_av(struct audit_buffer > *ab, u16 tclass, u32 av) > return; > } > > + if (tclass >= ARRAY_SIZE(secclass_map)) { > + audit_log_format(ab, " 0x%x", av); > + return; > + } > + > perms = secclass_map[tclass-1].perms; > > audit_log_format(ab, " {"); > @@ -159,8 +164,10 @@ static void avc_dump_query(struct > audit_buffer *ab, u32 ssid, u32 tsid, u16 tcla > kfree(scontext); > } > > - BUG_ON(tclass >= ARRAY_SIZE(secclass_map)); > - audit_log_format(ab, " tclass=%s", > secclass_map[tclass-1].name); > + if (tclass < ARRAY_SIZE(secclass_map)) > + audit_log_format(ab, " tclass=%s", > secclass_map[tclass-1].name); > + else > + audit_log_format(ab, " tclass=%d", tclass); > } > > /** > > > -- > Stephen Smalley > National Security Agency > > > > Justin P. Mattock > > > > > -- > This message was distributed to subscribers of the selinux mailing list. > If you no longer wish to subscribe, send mail to > majordomo@tycho.nsa.gov <mailto:majordomo@tycho.nsa.gov> with > the words "unsubscribe selinux" without quotes as the message. > > -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe 2011-02-25 17:18 ` Justin Mattock 2011-02-26 3:51 ` Ethan Heidrick @ 2011-03-24 14:01 ` Stephen Smalley 2011-03-24 16:28 ` Justin P. Mattock 2011-03-24 21:21 ` Justin P. Mattock 1 sibling, 2 replies; 13+ messages in thread From: Stephen Smalley @ 2011-03-24 14:01 UTC (permalink / raw) To: Justin Mattock; +Cc: SE-Linux, Eric Paris On Fri, 2011-02-25 at 09:18 -0800, Justin Mattock wrote: > On Feb 25, 2011, at 6:07 AM, Stephen Smalley wrote: > > > On Thu, 2011-02-24 at 12:57 -0800, Justin Mattock wrote: > >> this just popped up..: > >> > >> > >> [29804.908327] SELinux: Invalid class 3588 > >> [29804.908438] ------------[ cut here ]------------ > >> [29804.908443] kernel BUG at security/selinux/avc.c:162! > > > > It might help debugging to get as much of the AVC message as we can > > even > > in this case, e.g. > > cool, thanks for the debug patch... I applied it, and will run it to > see if this fires off.. > current kernel is: 2.6.38-rc6-00116-g2821f46 Did you ever get any output from this debug patch? It would have shown up as an AVC message with tclass=[0-9]* rather than a class name. -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe 2011-03-24 14:01 ` Stephen Smalley @ 2011-03-24 16:28 ` Justin P. Mattock 2011-03-24 21:21 ` Justin P. Mattock 1 sibling, 0 replies; 13+ messages in thread From: Justin P. Mattock @ 2011-03-24 16:28 UTC (permalink / raw) To: Stephen Smalley; +Cc: SE-Linux, Eric Paris On 03/24/2011 07:01 AM, Stephen Smalley wrote: > On Fri, 2011-02-25 at 09:18 -0800, Justin Mattock wrote: >> On Feb 25, 2011, at 6:07 AM, Stephen Smalley wrote: >> >>> On Thu, 2011-02-24 at 12:57 -0800, Justin Mattock wrote: >>>> this just popped up..: >>>> >>>> >>>> [29804.908327] SELinux: Invalid class 3588 >>>> [29804.908438] ------------[ cut here ]------------ >>>> [29804.908443] kernel BUG at security/selinux/avc.c:162! >>> >>> It might help debugging to get as much of the AVC message as we can >>> even >>> in this case, e.g. >> >> cool, thanks for the debug patch... I applied it, and will run it to >> see if this fires off.. >> current kernel is: 2.6.38-rc6-00116-g2821f46 > > Did you ever get any output from this debug patch? It would have shown > up as an AVC message with tclass=[0-9]* rather than a class name. > I had this running with rc4/5/6 etc.. but since the merge window opened up I have not applied that patch until the window closes. I can apply it and send you dmesg. Justin P. Mattock -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe 2011-03-24 14:01 ` Stephen Smalley 2011-03-24 16:28 ` Justin P. Mattock @ 2011-03-24 21:21 ` Justin P. Mattock 1 sibling, 0 replies; 13+ messages in thread From: Justin P. Mattock @ 2011-03-24 21:21 UTC (permalink / raw) To: Stephen Smalley; +Cc: SE-Linux, Eric Paris On 03/24/2011 07:01 AM, Stephen Smalley wrote: > On Fri, 2011-02-25 at 09:18 -0800, Justin Mattock wrote: >> On Feb 25, 2011, at 6:07 AM, Stephen Smalley wrote: >> >>> On Thu, 2011-02-24 at 12:57 -0800, Justin Mattock wrote: >>>> this just popped up..: >>>> >>>> >>>> [29804.908327] SELinux: Invalid class 3588 >>>> [29804.908438] ------------[ cut here ]------------ >>>> [29804.908443] kernel BUG at security/selinux/avc.c:162! >>> >>> It might help debugging to get as much of the AVC message as we can >>> even >>> in this case, e.g. >> >> cool, thanks for the debug patch... I applied it, and will run it to >> see if this fires off.. >> current kernel is: 2.6.38-rc6-00116-g2821f46 > > Did you ever get any output from this debug patch? It would have shown > up as an AVC message with tclass=[0-9]* rather than a class name. > I'm looking and havent found the debug avc messge just yet, but I did apply this patch on top of the current Mainline: full dmesg for you(Thanks to fedora for providing the fpaste site!!) http://fpaste.org/U6H3/ Justin P. Mattock -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 13+ messages in thread
end of thread, other threads:[~2011-03-24 21:21 UTC | newest] Thread overview: 13+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2011-02-24 20:57 RIP: 0010:[<ffffffff811bdec1>] [<ffffffff811bdec1>] avc_audit_post_callback+0xc6/0xfe Justin Mattock 2011-02-24 20:57 ` Justin Mattock 2011-02-24 22:51 ` cto 2011-02-25 3:29 ` Eric Paris 2011-02-25 4:18 ` Justin Mattock 2011-02-25 4:16 ` Justin Mattock 2011-02-25 14:07 ` Stephen Smalley 2011-02-25 17:18 ` Justin Mattock 2011-02-26 3:51 ` Ethan Heidrick 2011-02-26 9:16 ` cto 2011-03-24 14:01 ` Stephen Smalley 2011-03-24 16:28 ` Justin P. Mattock 2011-03-24 21:21 ` Justin P. Mattock
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.