From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael C Thompson <thompsmc@us.ibm.com>
Subject: Re: audit 1.2.2 released
Date: Thu, 25 May 2006 10:22:22 -0500
Message-ID: <4475CBAE.2070101@us.ibm.com>
References: <200605121726.32952.sgrubb@redhat.com>	<4469F585.6030108@hp.com>	
	<200605161323.32162.sgrubb@redhat.com>	
	<200605221331.54945.sgrubb@redhat.com>	<4473374C.8030902@us.ibm.com>	
	<44738AA0.50006@us.ibm.com> <44739521.7080602@hp.com>	
	<4474B7B2.6030601@us.ibm.com>
	<1148504311.8828.6.camel@code.and.org>	
	<4475B5B2.3010408@us.ibm.com>
	<1148570190.8828.12.camel@code.and.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
In-Reply-To: <1148570190.8828.12.camel@code.and.org>
List-Unsubscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: James Antill <jantill@redhat.com>
Cc: linux-audit@redhat.com
List-Id: linux-audit@redhat.com

James Antill wrote:
> On Thu, 2006-05-25 at 08:48 -0500, Michael C Thompson wrote:
> 
>> Do you mean to say that embedded audit_log_user_message() inside a loop 
>> changes it's return code?
> 
>  Sorry, my explanation probably wasn't clear.
>  It changes from the first to the second invocation, the first is always
> -1 the second is always 0 (on boot, only, after boot the first succeeds
> as well).

This is interesting, that does seem like we're being denied for the 
first attempt of actions against the kernel... you said you've seen this 
in the targeted policy? (I've only seen this problem with the MLS policy)

Mike