From mboxrd@z Thu Jan 1 00:00:00 1970 From: Paul Moore Subject: Re: Audit not recording the correct syscall return value in Fedora 10? Date: Tue, 5 May 2009 15:20:52 -0400 Message-ID: <200905051520.52317.paul.moore@hp.com> References: <200904071134.35379.paul.moore@hp.com> <200905051422.04556.paul.moore@hp.com> <20090505190736.GA18169@suse.de> Mime-Version: 1.0 Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Return-path: Received: from mx1.redhat.com (mx1.redhat.com [172.16.48.31]) by int-mx1.corp.redhat.com (8.13.1/8.13.1) with ESMTP id n45JLBlg011071 for ; Tue, 5 May 2009 15:21:11 -0400 Received: from g1t0028.austin.hp.com (g1t0028.austin.hp.com [15.216.28.35]) by mx1.redhat.com (8.13.8/8.13.8) with ESMTP id n45JKtu5009843 for ; Tue, 5 May 2009 15:20:56 -0400 In-Reply-To: <20090505190736.GA18169@suse.de> Content-Disposition: inline List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Tony Jones Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com On Tuesday 05 May 2009 03:07:36 pm Tony Jones wrote: > On Tue, May 05, 2009 at 02:22:04PM -0400, Paul Moore wrote: > > I believe Matt Anderson (CC'd) reported the bug you are referring to and > > the workaround I posted seemed to fix the issue for him. I've stopped > > looking > > I'll check it out, I see the commit: > 6d208da89aabee8502debe842832ca0ab298d16d Well, that commit does solve a return value problem on 64 bit systems but it isn't the workaround I was referring to ... the mail which I sent that started this thread (April 7, 2009) has a small patch to arch/x86/kernel/entry_64.S to load the return value directly from the stack and not %rax to workaround the corruption issue. -- paul moore linux @ hp