[PATCH] auditctl Running In QEMU

[PATCH] auditctl Running In QEMU

[Nathaniel Husted]

The current stable version of ARM will not run in QEMU and errors with
an "unknown machine type" error. The following patch adds two machine
times to the ARMEB machine architecture. "armv5tejl" is the type
returned by uname -m when running the versatilepb machine type with a
default CPU (under Debian Squeeze 6.0). "armv7l" is return by uname -m
when run on a Samgsung Galaxy S SGH-I897 phone.

Signed-off by: Nathaniel Husted <nhusted@gmail.com>

diff -rpuN audit-2.2.1/lib/machinetab.h audit-2.2.1-patched/lib/machinetab.h
--- audit-2.2.1/lib/machinetab.h	2012-03-23 08:42:44.000000000 -0400
+++ audit-2.2.1-patched/lib/machinetab.h	2012-06-15 16:18:33.069787303 -0400
@@ -35,4 +35,6 @@ _S(MACH_ALPHA,   "alpha"  )
 #endif
 #ifdef WITH_ARMEB
 _S(MACH_ARMEB,   "armeb"  )
+_S(MACH_ARMEB,	 "armv5tejl")
+_S(MACH_ARMEB,	 "armv7l")
 #endif

Re: [PATCH] auditctl Running In QEMU

[Steve Grubb]

On Friday, June 15, 2012 01:23:13 PM Nathaniel Husted wrote:
> The current stable version of ARM will not run in QEMU and errors with
> an "unknown machine type" error. The following patch adds two machine
> times to the ARMEB machine architecture. "armv5tejl" is the type
> returned by uname -m when running the versatilepb machine type with a
> default CPU (under Debian Squeeze 6.0). "armv7l" is return by uname -m
> when run on a Samgsung Galaxy S SGH-I897 phone.

Are the syscall numbers OK? IOW, with this change auditing works correctly on 
those systems?

-Steve

> Signed-off by: Nathaniel Husted <nhusted@gmail.com>
> 
> diff -rpuN audit-2.2.1/lib/machinetab.h audit-2.2.1-patched/lib/machinetab.h
> --- audit-2.2.1/lib/machinetab.h	2012-03-23 08:42:44.000000000 -0400 +++
> audit-2.2.1-patched/lib/machinetab.h	2012-06-15 16:18:33.069787303 -0400 @@
> -35,4 +35,6 @@ _S(MACH_ALPHA,   "alpha"  )
>  #endif
>  #ifdef WITH_ARMEB
>  _S(MACH_ARMEB,   "armeb"  )
> +_S(MACH_ARMEB,	 "armv5tejl")
> +_S(MACH_ARMEB,	 "armv7l")
>  #endif
> 
> --
> Linux-audit mailing list
> Linux-audit@redhat.com
> https://www.redhat.com/mailman/listinfo/linux-audit

Re: [PATCH] auditctl Running In QEMU

[Nathaniel Husted]

As far as I can tell the numbers seem to be OK. I haven't been able to
do a thorough check all but the system calls I have tested appear to
match (socketcall, open, close, read, write). I think a thorough
testing should be done. I haven't had time to perform any testing
quite to this level.

Cheers,
Nathaniel


On Mon, Aug 27, 2012 at 7:32 AM, Steve Grubb <sgrubb@redhat.com> wrote:
> On Friday, June 15, 2012 01:23:13 PM Nathaniel Husted wrote:
>> The current stable version of ARM will not run in QEMU and errors with
>> an "unknown machine type" error. The following patch adds two machine
>> times to the ARMEB machine architecture. "armv5tejl" is the type
>> returned by uname -m when running the versatilepb machine type with a
>> default CPU (under Debian Squeeze 6.0). "armv7l" is return by uname -m
>> when run on a Samgsung Galaxy S SGH-I897 phone.
>
> Are the syscall numbers OK? IOW, with this change auditing works correctly on
> those systems?
>
> -Steve
>
>> Signed-off by: Nathaniel Husted <nhusted@gmail.com>
>>
>> diff -rpuN audit-2.2.1/lib/machinetab.h audit-2.2.1-patched/lib/machinetab.h
>> --- audit-2.2.1/lib/machinetab.h      2012-03-23 08:42:44.000000000 -0400 +++
>> audit-2.2.1-patched/lib/machinetab.h  2012-06-15 16:18:33.069787303 -0400 @@
>> -35,4 +35,6 @@ _S(MACH_ALPHA,   "alpha"  )
>>  #endif
>>  #ifdef WITH_ARMEB
>>  _S(MACH_ARMEB,   "armeb"  )
>> +_S(MACH_ARMEB,        "armv5tejl")
>> +_S(MACH_ARMEB,        "armv7l")
>>  #endif
>>
>> --
>> Linux-audit mailing list
>> Linux-audit@redhat.com
>> https://www.redhat.com/mailman/listinfo/linux-audit