public inbox for linux-audit@redhat.com
 help / color / mirror / Atom feed
From: Paul Moore <paul.moore@hp.com>
To: Tony Jones <tonyj@suse.de>
Cc: linux-audit@redhat.com
Subject: Re: Audit not recording the correct syscall return value in Fedora 10?
Date: Fri, 8 May 2009 09:22:23 -0400	[thread overview]
Message-ID: <200905080922.23210.paul.moore@hp.com> (raw)
In-Reply-To: <20090507230500.GA24658@suse.de>

On Thursday 07 May 2009 07:05:00 pm Tony Jones wrote:
> On Tue, May 05, 2009 at 03:50:01PM -0400, Paul Moore wrote:
> > No problem.  As far as I'm aware the discussion never went beyond this
> > thread as I was unable to recreate the problem with the (then) current
> > kernels but it may not be a bad idea to get the arch folks and perhaps
> > lkml involved if we can narrow this down a little.
>
> Doesn't reproduce for me with 2.6.30-rc4-git1.

Well, since neither one of us can reproduce it on recent kernels it looks like 
the root cause either went away, the problem was resolved or we are just 
getting lucky with a timing windows somewhere.  Sigh.

I guess I should just be happy it is no longer happening :)

> For our SLES11 kernel (2.6.27+patches) I needed your entry_64.S change to
> fix the problem.

I also wonder about other arches, heck, even 32 bit x86.

> With just commit 6d208da89aabee8502debe842832ca0ab298d16d I get:
>
> [snippet]

[snippet snipped]

Yes, I wouldn't expect the above commit to resolve the modprobe issue that 
Matt reported since init_module returns an int.  The commit above should only 
matter when the syscall returns a 64 bit value (long, etc.) on a 64 bit 
system.

-- 
paul moore
linux @ hp

      reply	other threads:[~2009-05-08 13:22 UTC|newest]

Thread overview: 12+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-04-07 15:34 Audit not recording the correct syscall return value in Fedora 10? Paul Moore
2009-04-08  2:44 ` Klaus Heinrich Kiwi
2009-04-08 21:38   ` Paul Moore
2009-05-05 18:15   ` Tony Jones
2009-05-05 18:08 ` Tony Jones
2009-05-05 18:22   ` Paul Moore
2009-05-05 19:07     ` Tony Jones
2009-05-05 19:20       ` Paul Moore
2009-05-05 19:34         ` Tony Jones
2009-05-05 19:50           ` Paul Moore
2009-05-07 23:05             ` Tony Jones
2009-05-08 13:22               ` Paul Moore [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=200905080922.23210.paul.moore@hp.com \
    --to=paul.moore@hp.com \
    --cc=linux-audit@redhat.com \
    --cc=tonyj@suse.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox