From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: [PATCH v3 0/4] audit(userspace): Improve arm/aarch64 support Date: Wed, 19 Mar 2014 20:38:45 -0400 Message-ID: <1673683.H2Z9NA5WsE@x2> References: <1389946529-4590-1-git-send-email-takahiro.akashi@linaro.org> <1391410681-4924-1-git-send-email-takahiro.akashi@linaro.org> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <1391410681-4924-1-git-send-email-takahiro.akashi@linaro.org> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com Cc: will.deacon@arm.com, arndb@arndb.de, patches@linaro.org List-Id: linux-audit@redhat.com On Monday, February 03, 2014 03:57:56 PM AKASHI Takahiro wrote: > On ARM, endianness doesn't make any differences on auditing. > See the discussion below: > http://permalink.gmane.org/gmane.linux.ports.arm.kernel/165266 > In this version, mistakenly-used "ARMEB" and "armeb" are substituted > with "ARM" and "arm" respectively in Patches [1,2/4]. > > patch [3/4] adds more system call definitions for aarch64 (or arm64 in > kernel) that are missing in the current implementation. > https://www.redhat.com/archives/linux-audit/2013-November/msg00082.html > > Patch [4/4] enables auditing 32-bit tasks (ie. auditctl -F arch=b32) on > aarch64. > > This code replies on my kernel patch for aarch64 support, and > was tested on armv8 fast model with 32-bit/64-bit userland: > 1) basic operations with auditctl/autrace > # auditctl -a exit,always -S openat -F path=/etc/inittab > # auditctl -a exit,always -F dir=/tmp -F perm=rw > # auditctl -a task,always > # autrace /bin/ls > by comparing output from autrace with one from strace > > 2) audit-test-code (+ my workarounds for arm/arm64) > by running "audit-tool", "filter" and "syscalls" test categories. Thanks. This set of patches have been applied in svn. It would be good to double check that arm still works for everyone. It does change --with-armeb to --with-arm. This is something all distributions and testers would need to fix in their build system. Please let me know if there are any other updates needed. -Steve