[PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Christophe Leroy (CS GROUP)]

From: Christophe Leroy <christophe.leroy@csgroup.eu>

Commit e65e1fc2d24b ("[PATCH] syscall class hookup for all normal
targets") added generic support for AUDIT but that didn't include
support for bi-arch like powerpc.

Commit 4b58841149dc ("audit: Add generic compat syscall support")
added generic support for bi-arch.

Convert powerpc to that bi-arch generic audit support.

With this change generated text is similar.

Thomas has confirmed that the previously failing filter_exclude/test
is now successful both without and with this patch, see [1]

[1] https://lore.kernel.org/all/20260306115350-ef265661-6d6b-4043-9bd0-8e6b437d0d67@linutronix.de/

Link: https://github.com/linuxppc/issues/issues/412
Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu>
Reviewed-by: Cédric Le Goater <clg@kaod.org>
---
Venkat, a test result with https://github.com/linux-audit/audit-testsuite would be appreciated.

v3: Rebased on v7.0-rc1

v2: https://lore.kernel.org/all/a4b3951d1191d4183d92a07a6097566bde60d00a.1629812058.git.christophe.leroy@csgroup.eu/
---
 arch/powerpc/Kconfig                |  5 +-
 arch/powerpc/include/asm/unistd32.h |  7 +++
 arch/powerpc/kernel/Makefile        |  3 -
 arch/powerpc/kernel/audit.c         | 87 -----------------------------
 arch/powerpc/kernel/compat_audit.c  | 49 ----------------
 5 files changed, 8 insertions(+), 143 deletions(-)
 create mode 100644 arch/powerpc/include/asm/unistd32.h
 delete mode 100644 arch/powerpc/kernel/audit.c
 delete mode 100644 arch/powerpc/kernel/compat_audit.c

diff --git a/arch/powerpc/Kconfig b/arch/powerpc/Kconfig
index 10240cb80904..4bb8cfa37d79 100644
--- a/arch/powerpc/Kconfig
+++ b/arch/powerpc/Kconfig
@@ -188,6 +188,7 @@ config PPC
 	select ARCH_WANT_OPTIMIZE_DAX_VMEMMAP	if PPC_RADIX_MMU
 	select ARCH_WANTS_MODULES_DATA_IN_VMALLOC	if PPC_BOOK3S_32 || PPC_8xx
 	select ARCH_WEAK_RELEASE_ACQUIRE
+	select AUDIT_ARCH_COMPAT_GENERIC
 	select BINFMT_ELF
 	select BUILDTIME_TABLE_SORT
 	select CLONE_BACKWARDS
@@ -370,10 +371,6 @@ config GENERIC_TBSYNC
 	bool
 	default y if PPC32 && SMP
 
-config AUDIT_ARCH
-	bool
-	default y
-
 config GENERIC_BUG
 	bool
 	default y
diff --git a/arch/powerpc/include/asm/unistd32.h b/arch/powerpc/include/asm/unistd32.h
new file mode 100644
index 000000000000..07689897d206
--- /dev/null
+++ b/arch/powerpc/include/asm/unistd32.h
@@ -0,0 +1,7 @@
+/* SPDX-License-Identifier: GPL-2.0-or-later */
+#ifndef _ASM_POWERPC_UNISTD32_H_
+#define _ASM_POWERPC_UNISTD32_H_
+
+#include <asm/unistd_32.h>
+
+#endif /* _ASM_POWERPC_UNISTD32_H_ */
diff --git a/arch/powerpc/kernel/Makefile b/arch/powerpc/kernel/Makefile
index 2f0a2e69c607..7bf6b16b2d93 100644
--- a/arch/powerpc/kernel/Makefile
+++ b/arch/powerpc/kernel/Makefile
@@ -149,9 +149,6 @@ obj-$(CONFIG_PCI)		+= pci_$(BITS).o $(pci64-y) \
 				   pci-common.o pci_of_scan.o
 obj-$(CONFIG_PCI_MSI)		+= msi.o
 
-obj-$(CONFIG_AUDIT)		+= audit.o
-obj64-$(CONFIG_AUDIT)		+= compat_audit.o
-
 obj-y				+= trace/
 
 ifneq ($(CONFIG_PPC_INDIRECT_PIO),y)
diff --git a/arch/powerpc/kernel/audit.c b/arch/powerpc/kernel/audit.c
deleted file mode 100644
index 92298d6a3a37..000000000000
--- a/arch/powerpc/kernel/audit.c
+++ /dev/null
@@ -1,87 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0
-#include <linux/init.h>
-#include <linux/types.h>
-#include <linux/audit.h>
-#include <asm/unistd.h>
-
-#include "audit_32.h"
-
-static unsigned dir_class[] = {
-#include <asm-generic/audit_dir_write.h>
-~0U
-};
-
-static unsigned read_class[] = {
-#include <asm-generic/audit_read.h>
-~0U
-};
-
-static unsigned write_class[] = {
-#include <asm-generic/audit_write.h>
-~0U
-};
-
-static unsigned chattr_class[] = {
-#include <asm-generic/audit_change_attr.h>
-~0U
-};
-
-static unsigned signal_class[] = {
-#include <asm-generic/audit_signal.h>
-~0U
-};
-
-int audit_classify_arch(int arch)
-{
-#ifdef CONFIG_PPC64
-	if (arch == AUDIT_ARCH_PPC)
-		return 1;
-#endif
-	return 0;
-}
-
-int audit_classify_syscall(int abi, unsigned syscall)
-{
-#ifdef CONFIG_PPC64
-	if (abi == AUDIT_ARCH_PPC)
-		return ppc32_classify_syscall(syscall);
-#endif
-	switch(syscall) {
-	case __NR_open:
-		return AUDITSC_OPEN;
-	case __NR_openat:
-		return AUDITSC_OPENAT;
-	case __NR_socketcall:
-		return AUDITSC_SOCKETCALL;
-	case __NR_execve:
-		return AUDITSC_EXECVE;
-	case __NR_openat2:
-		return AUDITSC_OPENAT2;
-	default:
-		return AUDITSC_NATIVE;
-	}
-}
-
-static int __init audit_classes_init(void)
-{
-#ifdef CONFIG_PPC64
-	extern __u32 ppc32_dir_class[];
-	extern __u32 ppc32_write_class[];
-	extern __u32 ppc32_read_class[];
-	extern __u32 ppc32_chattr_class[];
-	extern __u32 ppc32_signal_class[];
-	audit_register_class(AUDIT_CLASS_WRITE_32, ppc32_write_class);
-	audit_register_class(AUDIT_CLASS_READ_32, ppc32_read_class);
-	audit_register_class(AUDIT_CLASS_DIR_WRITE_32, ppc32_dir_class);
-	audit_register_class(AUDIT_CLASS_CHATTR_32, ppc32_chattr_class);
-	audit_register_class(AUDIT_CLASS_SIGNAL_32, ppc32_signal_class);
-#endif
-	audit_register_class(AUDIT_CLASS_WRITE, write_class);
-	audit_register_class(AUDIT_CLASS_READ, read_class);
-	audit_register_class(AUDIT_CLASS_DIR_WRITE, dir_class);
-	audit_register_class(AUDIT_CLASS_CHATTR, chattr_class);
-	audit_register_class(AUDIT_CLASS_SIGNAL, signal_class);
-	return 0;
-}
-
-__initcall(audit_classes_init);
diff --git a/arch/powerpc/kernel/compat_audit.c b/arch/powerpc/kernel/compat_audit.c
deleted file mode 100644
index 57b38c592b9f..000000000000
--- a/arch/powerpc/kernel/compat_audit.c
+++ /dev/null
@@ -1,49 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0
-#undef __powerpc64__
-#include <linux/audit_arch.h>
-#include <asm/unistd.h>
-
-#include "audit_32.h"
-
-unsigned ppc32_dir_class[] = {
-#include <asm-generic/audit_dir_write.h>
-~0U
-};
-
-unsigned ppc32_chattr_class[] = {
-#include <asm-generic/audit_change_attr.h>
-~0U
-};
-
-unsigned ppc32_write_class[] = {
-#include <asm-generic/audit_write.h>
-~0U
-};
-
-unsigned ppc32_read_class[] = {
-#include <asm-generic/audit_read.h>
-~0U
-};
-
-unsigned ppc32_signal_class[] = {
-#include <asm-generic/audit_signal.h>
-~0U
-};
-
-int ppc32_classify_syscall(unsigned syscall)
-{
-	switch(syscall) {
-	case __NR_open:
-		return AUDITSC_OPEN;
-	case __NR_openat:
-		return AUDITSC_OPENAT;
-	case __NR_socketcall:
-		return AUDITSC_SOCKETCALL;
-	case __NR_execve:
-		return AUDITSC_EXECVE;
-	case __NR_openat2:
-		return AUDITSC_OPENAT2;
-	default:
-		return AUDITSC_COMPAT;
-	}
-}
-- 
2.49.0

Re: [PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Paul Moore]

On Tue, Mar 10, 2026 at 11:08 AM Christophe Leroy (CS GROUP)
<chleroy@kernel.org> wrote:
>
> From: Christophe Leroy <christophe.leroy@csgroup.eu>
>
> Commit e65e1fc2d24b ("[PATCH] syscall class hookup for all normal
> targets") added generic support for AUDIT but that didn't include
> support for bi-arch like powerpc.
>
> Commit 4b58841149dc ("audit: Add generic compat syscall support")
> added generic support for bi-arch.
>
> Convert powerpc to that bi-arch generic audit support.
>
> With this change generated text is similar.
>
> Thomas has confirmed that the previously failing filter_exclude/test
> is now successful both without and with this patch, see [1]
>
> [1] https://lore.kernel.org/all/20260306115350-ef265661-6d6b-4043-9bd0-8e6b437d0d67@linutronix.de/
>
> Link: https://github.com/linuxppc/issues/issues/412
> Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu>
> Reviewed-by: Cédric Le Goater <clg@kaod.org>
> ---
> Venkat, a test result with https://github.com/linux-audit/audit-testsuite would be appreciated.

Yes, I'd like to see confirmation that the audit test suite runs clean
on ppc systems with this patch applied, and unfortunately without a
ppc system I have no way to test this myself.

> v3: Rebased on v7.0-rc1
>
> v2: https://lore.kernel.org/all/a4b3951d1191d4183d92a07a6097566bde60d00a.1629812058.git.christophe.leroy@csgroup.eu/
> ---
>  arch/powerpc/Kconfig                |  5 +-
>  arch/powerpc/include/asm/unistd32.h |  7 +++
>  arch/powerpc/kernel/Makefile        |  3 -
>  arch/powerpc/kernel/audit.c         | 87 -----------------------------
>  arch/powerpc/kernel/compat_audit.c  | 49 ----------------
>  5 files changed, 8 insertions(+), 143 deletions(-)
>  create mode 100644 arch/powerpc/include/asm/unistd32.h
>  delete mode 100644 arch/powerpc/kernel/audit.c
>  delete mode 100644 arch/powerpc/kernel/compat_audit.c

-- 
paul-moore.com

Re: [PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Harsh Prateek Bora]

+ Ritesh

Hi Venkat,

On 11/03/26 12:49 am, Paul Moore wrote:
> On Tue, Mar 10, 2026 at 11:08 AM Christophe Leroy (CS GROUP)
> <chleroy@kernel.org> wrote:
>>
>> From: Christophe Leroy <christophe.leroy@csgroup.eu>
>>
>> Commit e65e1fc2d24b ("[PATCH] syscall class hookup for all normal
>> targets") added generic support for AUDIT but that didn't include
>> support for bi-arch like powerpc.
>>
>> Commit 4b58841149dc ("audit: Add generic compat syscall support")
>> added generic support for bi-arch.
>>
>> Convert powerpc to that bi-arch generic audit support.
>>
>> With this change generated text is similar.
>>
>> Thomas has confirmed that the previously failing filter_exclude/test
>> is now successful both without and with this patch, see [1]
>>
>> [1] https://lore.kernel.org/all/20260306115350-ef265661-6d6b-4043-9bd0-8e6b437d0d67@linutronix.de/
>>
>> Link: https://github.com/linuxppc/issues/issues/412
>> Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu>
>> Reviewed-by: Cédric Le Goater <clg@kaod.org>
>> ---
>> Venkat, a test result with https://github.com/linux-audit/audit-testsuite would be appreciated.
> 
> Yes, I'd like to see confirmation that the audit test suite runs clean
> on ppc systems with this patch applied, and unfortunately without a
> ppc system I have no way to test this myself.

Is it possible to include this test suite in the IBM CI ?

Thanks
Harsh
> 
>> v3: Rebased on v7.0-rc1
>>
>> v2: https://lore.kernel.org/all/a4b3951d1191d4183d92a07a6097566bde60d00a.1629812058.git.christophe.leroy@csgroup.eu/
>> ---
>>   arch/powerpc/Kconfig                |  5 +-
>>   arch/powerpc/include/asm/unistd32.h |  7 +++
>>   arch/powerpc/kernel/Makefile        |  3 -
>>   arch/powerpc/kernel/audit.c         | 87 -----------------------------
>>   arch/powerpc/kernel/compat_audit.c  | 49 ----------------
>>   5 files changed, 8 insertions(+), 143 deletions(-)
>>   create mode 100644 arch/powerpc/include/asm/unistd32.h
>>   delete mode 100644 arch/powerpc/kernel/audit.c
>>   delete mode 100644 arch/powerpc/kernel/compat_audit.c
> 

Re: [PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Madhavan Srinivasan]

On 5/13/26 10:05 AM, Harsh Prateek Bora wrote:
> + Ritesh
>
> Hi Venkat,
>
> On 11/03/26 12:49 am, Paul Moore wrote:
>> On Tue, Mar 10, 2026 at 11:08 AM Christophe Leroy (CS GROUP)
>> <chleroy@kernel.org> wrote:
>>>
>>> From: Christophe Leroy <christophe.leroy@csgroup.eu>
>>>
>>> Commit e65e1fc2d24b ("[PATCH] syscall class hookup for all normal
>>> targets") added generic support for AUDIT but that didn't include
>>> support for bi-arch like powerpc.
>>>
>>> Commit 4b58841149dc ("audit: Add generic compat syscall support")
>>> added generic support for bi-arch.
>>>
>>> Convert powerpc to that bi-arch generic audit support.
>>>
>>> With this change generated text is similar.
>>>
>>> Thomas has confirmed that the previously failing filter_exclude/test
>>> is now successful both without and with this patch, see [1]
>>>
>>> [1] 
>>> https://lore.kernel.org/all/20260306115350-ef265661-6d6b-4043-9bd0-8e6b437d0d67@linutronix.de/
>>>
>>> Link: https://github.com/linuxppc/issues/issues/412
>>> Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu>
>>> Reviewed-by: Cédric Le Goater <clg@kaod.org>
>>> ---
>>> Venkat, a test result with 
>>> https://github.com/linux-audit/audit-testsuite would be appreciated.
>>
>> Yes, I'd like to see confirmation that the audit test suite runs clean
>> on ppc systems with this patch applied, and unfortunately without a
>> ppc system I have no way to test this myself.
>
My bad, this is a miss from my end.
Venkat is already on this and will update the results here.

Maddy


> Is it possible to include this test suite in the IBM CI ?
>
> Thanks
> Harsh
>>
>>> v3: Rebased on v7.0-rc1
>>>
>>> v2: 
>>> https://lore.kernel.org/all/a4b3951d1191d4183d92a07a6097566bde60d00a.1629812058.git.christophe.leroy@csgroup.eu/
>>> ---
>>>   arch/powerpc/Kconfig                |  5 +-
>>>   arch/powerpc/include/asm/unistd32.h |  7 +++
>>>   arch/powerpc/kernel/Makefile        |  3 -
>>>   arch/powerpc/kernel/audit.c         | 87 
>>> -----------------------------
>>>   arch/powerpc/kernel/compat_audit.c  | 49 ----------------
>>>   5 files changed, 8 insertions(+), 143 deletions(-)
>>>   create mode 100644 arch/powerpc/include/asm/unistd32.h
>>>   delete mode 100644 arch/powerpc/kernel/audit.c
>>>   delete mode 100644 arch/powerpc/kernel/compat_audit.c
>>
>
>

Re: [PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Paul Moore]

On Wed, May 13, 2026 at 1:42 AM Madhavan Srinivasan <maddy@linux.ibm.com> wrote:
> On 5/13/26 10:05 AM, Harsh Prateek Bora wrote:
> > On 11/03/26 12:49 am, Paul Moore wrote:
> >> On Tue, Mar 10, 2026 at 11:08 AM Christophe Leroy (CS GROUP)
> >> <chleroy@kernel.org> wrote:
> >>>
> >>> From: Christophe Leroy <christophe.leroy@csgroup.eu>
> >>>
> >>> Commit e65e1fc2d24b ("[PATCH] syscall class hookup for all normal
> >>> targets") added generic support for AUDIT but that didn't include
> >>> support for bi-arch like powerpc.
> >>>
> >>> Commit 4b58841149dc ("audit: Add generic compat syscall support")
> >>> added generic support for bi-arch.
> >>>
> >>> Convert powerpc to that bi-arch generic audit support.
> >>>
> >>> With this change generated text is similar.
> >>>
> >>> Thomas has confirmed that the previously failing filter_exclude/test
> >>> is now successful both without and with this patch, see [1]
> >>>
> >>> [1]
> >>> https://lore.kernel.org/all/20260306115350-ef265661-6d6b-4043-9bd0-8e6b437d0d67@linutronix.de/
> >>>
> >>> Link: https://github.com/linuxppc/issues/issues/412
> >>> Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu>
> >>> Reviewed-by: Cédric Le Goater <clg@kaod.org>
> >>> ---
> >>> Venkat, a test result with
> >>> https://github.com/linux-audit/audit-testsuite would be appreciated.
> >>
> >> Yes, I'd like to see confirmation that the audit test suite runs clean
> >> on ppc systems with this patch applied, and unfortunately without a
> >> ppc system I have no way to test this myself.
>
> My bad, this is a miss from my end.
> Venkat is already on this and will update the results here.

Do we have an update on this?  Maybe I missed it, but I don't recall
seeing any test results.

-- 
paul-moore.com

Re: [PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Madhavan Srinivasan]

On 7/1/26 12:41 AM, Paul Moore wrote:
> On Wed, May 13, 2026 at 1:42 AM Madhavan Srinivasan <maddy@linux.ibm.com> wrote:
>> On 5/13/26 10:05 AM, Harsh Prateek Bora wrote:
>>> On 11/03/26 12:49 am, Paul Moore wrote:
>>>> On Tue, Mar 10, 2026 at 11:08 AM Christophe Leroy (CS GROUP)
>>>> <chleroy@kernel.org> wrote:
>>>>> From: Christophe Leroy <christophe.leroy@csgroup.eu>
>>>>>
>>>>> Commit e65e1fc2d24b ("[PATCH] syscall class hookup for all normal
>>>>> targets") added generic support for AUDIT but that didn't include
>>>>> support for bi-arch like powerpc.
>>>>>
>>>>> Commit 4b58841149dc ("audit: Add generic compat syscall support")
>>>>> added generic support for bi-arch.
>>>>>
>>>>> Convert powerpc to that bi-arch generic audit support.
>>>>>
>>>>> With this change generated text is similar.
>>>>>
>>>>> Thomas has confirmed that the previously failing filter_exclude/test
>>>>> is now successful both without and with this patch, see [1]
>>>>>
>>>>> [1]
>>>>> https://lore.kernel.org/all/20260306115350-ef265661-6d6b-4043-9bd0-8e6b437d0d67@linutronix.de/
>>>>>
>>>>> Link: https://github.com/linuxppc/issues/issues/412
>>>>> Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu>
>>>>> Reviewed-by: Cédric Le Goater <clg@kaod.org>
>>>>> ---
>>>>> Venkat, a test result with
>>>>> https://github.com/linux-audit/audit-testsuite would be appreciated.
>>>> Yes, I'd like to see confirmation that the audit test suite runs clean
>>>> on ppc systems with this patch applied, and unfortunately without a
>>>> ppc system I have no way to test this myself.
>> My bad, this is a miss from my end.
>> Venkat is already on this and will update the results here.
> Do we have an update on this?  Maybe I missed it, but I don't recall
> seeing any test results.
Venkat, did run the test but I guess he missed to respond here,
Details of his test run that he shared me in the internal chat from May 13.

backlog_wait_time_actual_reset/test .. ok
bpf/test ............................. ok
exec_execve/test ..................... ok
exec_name/test ....................... ok
fanotify/test ........................ ok
field_compare/test ................... ok
file_create/test ..................... ok
file_delete/test ..................... ok
file_permission/test ................. ok
file_rename/test ..................... ok
filter_exclude/test .................. ok
filter_exit/test ..................... ok
filter_saddr_fam/test ................ ok
filter_sessionid/test ................ ok
io_uring/test ........................ ok
login_tty/test ....................... ok
lost_reset/test ...................... ok
netfilter_pkt/test ................... Can't exec "nc": No such file or 
directory at netfilter_pkt/test line 83.

Venkat, can you please re-run if possible and paste the log here.

Thanks
Maddy

Re: [PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Venkat Rao Bagalkote]

On 01/07/26 7:44 am, Madhavan Srinivasan wrote:
>
> On 7/1/26 12:41 AM, Paul Moore wrote:
>> On Wed, May 13, 2026 at 1:42 AM Madhavan Srinivasan 
>> <maddy@linux.ibm.com> wrote:
>>> On 5/13/26 10:05 AM, Harsh Prateek Bora wrote:
>>>> On 11/03/26 12:49 am, Paul Moore wrote:
>>>>> On Tue, Mar 10, 2026 at 11:08 AM Christophe Leroy (CS GROUP)
>>>>> <chleroy@kernel.org> wrote:
>>>>>> From: Christophe Leroy <christophe.leroy@csgroup.eu>
>>>>>>
>>>>>> Commit e65e1fc2d24b ("[PATCH] syscall class hookup for all normal
>>>>>> targets") added generic support for AUDIT but that didn't include
>>>>>> support for bi-arch like powerpc.
>>>>>>
>>>>>> Commit 4b58841149dc ("audit: Add generic compat syscall support")
>>>>>> added generic support for bi-arch.
>>>>>>
>>>>>> Convert powerpc to that bi-arch generic audit support.
>>>>>>
>>>>>> With this change generated text is similar.
>>>>>>
>>>>>> Thomas has confirmed that the previously failing filter_exclude/test
>>>>>> is now successful both without and with this patch, see [1]
>>>>>>
>>>>>> [1]
>>>>>> https://lore.kernel.org/all/20260306115350-ef265661-6d6b-4043-9bd0-8e6b437d0d67@linutronix.de/ 
>>>>>>
>>>>>>
>>>>>> Link: https://github.com/linuxppc/issues/issues/412
>>>>>> Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu>
>>>>>> Reviewed-by: Cédric Le Goater <clg@kaod.org>
>>>>>> ---
>>>>>> Venkat, a test result with
>>>>>> https://github.com/linux-audit/audit-testsuite would be appreciated.
>>>>> Yes, I'd like to see confirmation that the audit test suite runs 
>>>>> clean
>>>>> on ppc systems with this patch applied, and unfortunately without a
>>>>> ppc system I have no way to test this myself.
>>> My bad, this is a miss from my end.
>>> Venkat is already on this and will update the results here.
>> Do we have an update on this?  Maybe I missed it, but I don't recall
>> seeing any test results.
> Venkat, did run the test but I guess he missed to respond here,
> Details of his test run that he shared me in the internal chat from 
> May 13.


Sorry, My bad. I missed updating here. Yes, this was tested in May. 
Please let me know, if a re-run is required?

Regards,

Venkat.

>
> backlog_wait_time_actual_reset/test .. ok
> bpf/test ............................. ok
> exec_execve/test ..................... ok
> exec_name/test ....................... ok
> fanotify/test ........................ ok
> field_compare/test ................... ok
> file_create/test ..................... ok
> file_delete/test ..................... ok
> file_permission/test ................. ok
> file_rename/test ..................... ok
> filter_exclude/test .................. ok
> filter_exit/test ..................... ok
> filter_saddr_fam/test ................ ok
> filter_sessionid/test ................ ok
> io_uring/test ........................ ok
> login_tty/test ....................... ok
> lost_reset/test ...................... ok
> netfilter_pkt/test ................... Can't exec "nc": No such file 
> or directory at netfilter_pkt/test line 83.
>
> Venkat, can you please re-run if possible and paste the log here.
>
> Thanks
> Maddy
>
>

Re: [PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Christophe Leroy (CS GROUP)]

Le 01/07/2026 à 06:32, Venkat Rao Bagalkote a écrit :
> 
> On 01/07/26 7:44 am, Madhavan Srinivasan wrote:
>>
>> On 7/1/26 12:41 AM, Paul Moore wrote:
>>> On Wed, May 13, 2026 at 1:42 AM Madhavan Srinivasan 
>>> <maddy@linux.ibm.com> wrote:
>>>> On 5/13/26 10:05 AM, Harsh Prateek Bora wrote:
>>>>> On 11/03/26 12:49 am, Paul Moore wrote:
>>>>>> On Tue, Mar 10, 2026 at 11:08 AM Christophe Leroy (CS GROUP)
>>>>>> <chleroy@kernel.org> wrote:
>>>>>>> From: Christophe Leroy <christophe.leroy@csgroup.eu>
>>>>>>>
>>>>>>> Commit e65e1fc2d24b ("[PATCH] syscall class hookup for all normal
>>>>>>> targets") added generic support for AUDIT but that didn't include
>>>>>>> support for bi-arch like powerpc.
>>>>>>>
>>>>>>> Commit 4b58841149dc ("audit: Add generic compat syscall support")
>>>>>>> added generic support for bi-arch.
>>>>>>>
>>>>>>> Convert powerpc to that bi-arch generic audit support.
>>>>>>>
>>>>>>> With this change generated text is similar.
>>>>>>>
>>>>>>> Thomas has confirmed that the previously failing filter_exclude/test
>>>>>>> is now successful both without and with this patch, see [1]
>>>>>>>
>>>>>>> [1]
>>>>>>> https://eur01.safelinks.protection.outlook.com/? 
>>>>>>> url=https%3A%2F%2Flore.kernel.org%2Fall%2F20260306115350- 
>>>>>>> ef265661-6d6b-4043-9bd0-8e6b437d0d67%40linutronix.de%2F&data=05%7C02%7Cchristophe.leroy%40csgroup.eu%7C81e1e4e3bae245103d3308ded729bb47%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C639184771399964577%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=%2FtCHXFR5np67gntCnXqv7Eemo5WuwaIEcywxZQzDADA%3D&reserved=0
>>>>>>>
>>>>>>> Link: https://eur01.safelinks.protection.outlook.com/? 
>>>>>>> url=https%3A%2F%2Fgithub.com%2Flinuxppc%2Fissues%2Fissues%2F412&data=05%7C02%7Cchristophe.leroy%40csgroup.eu%7C81e1e4e3bae245103d3308ded729bb47%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C639184771400190794%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=4fPEX7HuGBcxOcXlcJVQvDdP7Y9InhDpbz3z%2BS9lkCQ%3D&reserved=0
>>>>>>> Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu>
>>>>>>> Reviewed-by: Cédric Le Goater <clg@kaod.org>
>>>>>>> ---
>>>>>>> Venkat, a test result with
>>>>>>> https://eur01.safelinks.protection.outlook.com/? 
>>>>>>> url=https%3A%2F%2Fgithub.com%2Flinux-audit%2Faudit- 
>>>>>>> testsuite&data=05%7C02%7Cchristophe.leroy%40csgroup.eu%7C81e1e4e3bae245103d3308ded729bb47%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C639184771400214912%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=yHp3p5zNx%2BqQg2cKBsKJADWcUcKVtZstzNScBfWzF%2FQ%3D&reserved=0 would be appreciated.
>>>>>> Yes, I'd like to see confirmation that the audit test suite runs 
>>>>>> clean
>>>>>> on ppc systems with this patch applied, and unfortunately without a
>>>>>> ppc system I have no way to test this myself.
>>>> My bad, this is a miss from my end.
>>>> Venkat is already on this and will update the results here.
>>> Do we have an update on this?  Maybe I missed it, but I don't recall
>>> seeing any test results.
>> Venkat, did run the test but I guess he missed to respond here,
>> Details of his test run that he shared me in the internal chat from 
>> May 13.
> 
> 
> Sorry, My bad. I missed updating here. Yes, this was tested in May. 
> Please let me know, if a re-run is required?

It looks like netcat (https://linux.die.net/man/1/nc) is not installed 
in you setup. Are you able to install it and rerun the test ?

Thanks
Christophe

> 
> Regards,
> 
> Venkat.
> 
>>
>> backlog_wait_time_actual_reset/test .. ok
>> bpf/test ............................. ok
>> exec_execve/test ..................... ok
>> exec_name/test ....................... ok
>> fanotify/test ........................ ok
>> field_compare/test ................... ok
>> file_create/test ..................... ok
>> file_delete/test ..................... ok
>> file_permission/test ................. ok
>> file_rename/test ..................... ok
>> filter_exclude/test .................. ok
>> filter_exit/test ..................... ok
>> filter_saddr_fam/test ................ ok
>> filter_sessionid/test ................ ok
>> io_uring/test ........................ ok
>> login_tty/test ....................... ok
>> lost_reset/test ...................... ok
>> netfilter_pkt/test ................... Can't exec "nc": No such file 
>> or directory at netfilter_pkt/test line 83.
>>
>> Venkat, can you please re-run if possible and paste the log here.
>>
>> Thanks
>> Maddy
>>
>>

Re: [PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Venkat Rao Bagalkote]

On 01/07/26 10:26 am, Christophe Leroy (CS GROUP) wrote:
>
>
> Le 01/07/2026 à 06:32, Venkat Rao Bagalkote a écrit :
>>
>> On 01/07/26 7:44 am, Madhavan Srinivasan wrote:
>>>
>>> On 7/1/26 12:41 AM, Paul Moore wrote:
>>>> On Wed, May 13, 2026 at 1:42 AM Madhavan Srinivasan 
>>>> <maddy@linux.ibm.com> wrote:
>>>>> On 5/13/26 10:05 AM, Harsh Prateek Bora wrote:
>>>>>> On 11/03/26 12:49 am, Paul Moore wrote:
>>>>>>> On Tue, Mar 10, 2026 at 11:08 AM Christophe Leroy (CS GROUP)
>>>>>>> <chleroy@kernel.org> wrote:
>>>>>>>> From: Christophe Leroy <christophe.leroy@csgroup.eu>
>>>>>>>>
>>>>>>>> Commit e65e1fc2d24b ("[PATCH] syscall class hookup for all normal
>>>>>>>> targets") added generic support for AUDIT but that didn't include
>>>>>>>> support for bi-arch like powerpc.
>>>>>>>>
>>>>>>>> Commit 4b58841149dc ("audit: Add generic compat syscall support")
>>>>>>>> added generic support for bi-arch.
>>>>>>>>
>>>>>>>> Convert powerpc to that bi-arch generic audit support.
>>>>>>>>
>>>>>>>> With this change generated text is similar.
>>>>>>>>
>>>>>>>> Thomas has confirmed that the previously failing 
>>>>>>>> filter_exclude/test
>>>>>>>> is now successful both without and with this patch, see [1]
>>>>>>>>
>>>>>>>> [1]
>>>>>>>> https://eur01.safelinks.protection.outlook.com/? 
>>>>>>>> url=https%3A%2F%2Flore.kernel.org%2Fall%2F20260306115350- 
>>>>>>>> ef265661-6d6b-4043-9bd0-8e6b437d0d67%40linutronix.de%2F&data=05%7C02%7Cchristophe.leroy%40csgroup.eu%7C81e1e4e3bae245103d3308ded729bb47%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C639184771399964577%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=%2FtCHXFR5np67gntCnXqv7Eemo5WuwaIEcywxZQzDADA%3D&reserved=0 
>>>>>>>>
>>>>>>>>
>>>>>>>> Link: https://eur01.safelinks.protection.outlook.com/? 
>>>>>>>> url=https%3A%2F%2Fgithub.com%2Flinuxppc%2Fissues%2Fissues%2F412&data=05%7C02%7Cchristophe.leroy%40csgroup.eu%7C81e1e4e3bae245103d3308ded729bb47%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C639184771400190794%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=4fPEX7HuGBcxOcXlcJVQvDdP7Y9InhDpbz3z%2BS9lkCQ%3D&reserved=0
>>>>>>>> Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu>
>>>>>>>> Reviewed-by: Cédric Le Goater <clg@kaod.org>
>>>>>>>> ---
>>>>>>>> Venkat, a test result with
>>>>>>>> https://eur01.safelinks.protection.outlook.com/? 
>>>>>>>> url=https%3A%2F%2Fgithub.com%2Flinux-audit%2Faudit- 
>>>>>>>> testsuite&data=05%7C02%7Cchristophe.leroy%40csgroup.eu%7C81e1e4e3bae245103d3308ded729bb47%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C639184771400214912%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=yHp3p5zNx%2BqQg2cKBsKJADWcUcKVtZstzNScBfWzF%2FQ%3D&reserved=0 
>>>>>>>> would be appreciated.
>>>>>>> Yes, I'd like to see confirmation that the audit test suite runs 
>>>>>>> clean
>>>>>>> on ppc systems with this patch applied, and unfortunately without a
>>>>>>> ppc system I have no way to test this myself.
>>>>> My bad, this is a miss from my end.
>>>>> Venkat is already on this and will update the results here.
>>>> Do we have an update on this?  Maybe I missed it, but I don't recall
>>>> seeing any test results.
>>> Venkat, did run the test but I guess he missed to respond here,
>>> Details of his test run that he shared me in the internal chat from 
>>> May 13.
>>
>>
>> Sorry, My bad. I missed updating here. Yes, this was tested in May. 
>> Please let me know, if a re-run is required?
>
> It looks like netcat (https://linux.die.net/man/1/nc) is not installed 
> in you setup. Are you able to install it and rerun the test ?


I investigated the failure on the RHEL 10 ppc64le test system.


The netfilter_pkt failure is due to missing userspace dependencies:

Can't exec "nc": No such file or directory
Can't exec "iptables": No such file or directory
Can't exec "ip6tables": No such file or directory

I checked the system and confirmed that nc, ncat, iptables, and 
ip6tables are not installed:


which nc
which ncat
which iptables
which ip6tables


all return "not found".

The system has nftables installed (/usr/sbin/nft), but I was unable to 
locate packages providing nc/ncat or iptables/ip6tables in the currently 
enabled repositories (epel, rh10_base, rh10_app, rh10_crb).


At this point, the remaining failure appears to be an environmental 
dependency issue rather than a test failure. Please let me know if there 
is a recommended package/repository for EL10 ppc64le that provides 
netcat and iptables compatibility tools, and I can re-run the test.


Regards,

Venkat.

>
> Thanks
> Christophe
>
>>
>> Regards,
>>
>> Venkat.
>>
>>>
>>> backlog_wait_time_actual_reset/test .. ok
>>> bpf/test ............................. ok
>>> exec_execve/test ..................... ok
>>> exec_name/test ....................... ok
>>> fanotify/test ........................ ok
>>> field_compare/test ................... ok
>>> file_create/test ..................... ok
>>> file_delete/test ..................... ok
>>> file_permission/test ................. ok
>>> file_rename/test ..................... ok
>>> filter_exclude/test .................. ok
>>> filter_exit/test ..................... ok
>>> filter_saddr_fam/test ................ ok
>>> filter_sessionid/test ................ ok
>>> io_uring/test ........................ ok
>>> login_tty/test ....................... ok
>>> lost_reset/test ...................... ok
>>> netfilter_pkt/test ................... Can't exec "nc": No such file 
>>> or directory at netfilter_pkt/test line 83.
>>>
>>> Venkat, can you please re-run if possible and paste the log here.
>>>
>>> Thanks
>>> Maddy
>>>
>>>
>

Re: [PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Christophe Leroy (CS GROUP)]

Le 01/07/2026 à 10:09, Venkat Rao Bagalkote a écrit :
> 
> On 01/07/26 10:26 am, Christophe Leroy (CS GROUP) wrote:
>>
>>
>> Le 01/07/2026 à 06:32, Venkat Rao Bagalkote a écrit :
>>>
>>> On 01/07/26 7:44 am, Madhavan Srinivasan wrote:
>>>>
>>>> On 7/1/26 12:41 AM, Paul Moore wrote:
>>>>> On Wed, May 13, 2026 at 1:42 AM Madhavan Srinivasan 
>>>>> <maddy@linux.ibm.com> wrote:
>>>>>> On 5/13/26 10:05 AM, Harsh Prateek Bora wrote:
>>>>>>> On 11/03/26 12:49 am, Paul Moore wrote:
>>>>>>>> On Tue, Mar 10, 2026 at 11:08 AM Christophe Leroy (CS GROUP)
>>>>>>>> <chleroy@kernel.org> wrote:
>>>>>>>>> From: Christophe Leroy <christophe.leroy@csgroup.eu>
>>>>>>>>>
>>>>>>>>> Commit e65e1fc2d24b ("[PATCH] syscall class hookup for all normal
>>>>>>>>> targets") added generic support for AUDIT but that didn't include
>>>>>>>>> support for bi-arch like powerpc.
>>>>>>>>>
>>>>>>>>> Commit 4b58841149dc ("audit: Add generic compat syscall support")
>>>>>>>>> added generic support for bi-arch.
>>>>>>>>>
>>>>>>>>> Convert powerpc to that bi-arch generic audit support.
>>>>>>>>>
>>>>>>>>> With this change generated text is similar.
>>>>>>>>>
>>>>>>>>> Thomas has confirmed that the previously failing 
>>>>>>>>> filter_exclude/test
>>>>>>>>> is now successful both without and with this patch, see [1]
>>>>>>>>>
>>>>>>>>> [1]
>>>>>>>>> https://eur01.safelinks.protection.outlook.com/? 
>>>>>>>>> url=https%3A%2F%2Flore.kernel.org%2Fall%2F20260306115350- 
>>>>>>>>> ef265661-6d6b-4043-9bd0-8e6b437d0d67%40linutronix.de%2F&data=05%7C02%7Cchristophe.leroy%40csgroup.eu%7C81e1e4e3bae245103d3308ded729bb47%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C639184771399964577%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=%2FtCHXFR5np67gntCnXqv7Eemo5WuwaIEcywxZQzDADA%3D&reserved=0
>>>>>>>>>
>>>>>>>>> Link: https://eur01.safelinks.protection.outlook.com/? 
>>>>>>>>> url=https%3A%2F%2Fgithub.com%2Flinuxppc%2Fissues%2Fissues%2F412&data=05%7C02%7Cchristophe.leroy%40csgroup.eu%7C81e1e4e3bae245103d3308ded729bb47%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C639184771400190794%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=4fPEX7HuGBcxOcXlcJVQvDdP7Y9InhDpbz3z%2BS9lkCQ%3D&reserved=0
>>>>>>>>> Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu>
>>>>>>>>> Reviewed-by: Cédric Le Goater <clg@kaod.org>
>>>>>>>>> ---
>>>>>>>>> Venkat, a test result with
>>>>>>>>> https://eur01.safelinks.protection.outlook.com/? 
>>>>>>>>> url=https%3A%2F%2Fgithub.com%2Flinux-audit%2Faudit- 
>>>>>>>>> testsuite&data=05%7C02%7Cchristophe.leroy%40csgroup.eu%7C81e1e4e3bae245103d3308ded729bb47%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C639184771400214912%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=yHp3p5zNx%2BqQg2cKBsKJADWcUcKVtZstzNScBfWzF%2FQ%3D&reserved=0 would be appreciated.
>>>>>>>> Yes, I'd like to see confirmation that the audit test suite runs 
>>>>>>>> clean
>>>>>>>> on ppc systems with this patch applied, and unfortunately without a
>>>>>>>> ppc system I have no way to test this myself.
>>>>>> My bad, this is a miss from my end.
>>>>>> Venkat is already on this and will update the results here.
>>>>> Do we have an update on this?  Maybe I missed it, but I don't recall
>>>>> seeing any test results.
>>>> Venkat, did run the test but I guess he missed to respond here,
>>>> Details of his test run that he shared me in the internal chat from 
>>>> May 13.
>>>
>>>
>>> Sorry, My bad. I missed updating here. Yes, this was tested in May. 
>>> Please let me know, if a re-run is required?
>>
>> It looks like netcat (https://eur01.safelinks.protection.outlook.com/? 
>> url=https%3A%2F%2Flinux.die.net%2Fman%2F1%2Fnc&data=05%7C02%7Cchristophe.leroy%40csgroup.eu%7C97ac234e82884f729d1508ded7480f62%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C639184901648983046%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=18PJTLp9ozMqSkWWvBZmtjzjTI355Oq%2F5aqmU6zCiZE%3D&reserved=0) is not installed in you setup. Are you able to install it and rerun the test ?
> 
> 
> I investigated the failure on the RHEL 10 ppc64le test system.
> 
> 
> The netfilter_pkt failure is due to missing userspace dependencies:
> 
> Can't exec "nc": No such file or directory
> Can't exec "iptables": No such file or directory
> Can't exec "ip6tables": No such file or directory
> 
> I checked the system and confirmed that nc, ncat, iptables, and 
> ip6tables are not installed:
> 
> 
> which nc
> which ncat
> which iptables
> which ip6tables
> 
> 
> all return "not found".
> 
> The system has nftables installed (/usr/sbin/nft), but I was unable to 
> locate packages providing nc/ncat or iptables/ip6tables in the currently 
> enabled repositories (epel, rh10_base, rh10_app, rh10_crb).

Found:
- 
https://dl.fedoraproject.org/pub/epel/10/Everything/ppc64le/Packages/n/netcat-1.238-1.el10_3.ppc64le.rpm
- 
https://rpmfind.net/linux/RPM/almalinux-kitten/10/baseos/ppc64le/iptables-nft-1.8.11-6.el10.ppc64le.html
- 
https://www.rpmfind.net/linux/RPM/centos-stream/10/appstream/ppc64le/iptables-devel-1.8.11-14.el10.ppc64le.html

Does it help ?

Christophe

> 
> 
> At this point, the remaining failure appears to be an environmental 
> dependency issue rather than a test failure. Please let me know if there 
> is a recommended package/repository for EL10 ppc64le that provides 
> netcat and iptables compatibility tools, and I can re-run the test.
> 
> 
> Regards,
> 
> Venkat.
> 
>>
>> Thanks
>> Christophe
>>
>>>
>>> Regards,
>>>
>>> Venkat.
>>>
>>>>
>>>> backlog_wait_time_actual_reset/test .. ok
>>>> bpf/test ............................. ok
>>>> exec_execve/test ..................... ok
>>>> exec_name/test ....................... ok
>>>> fanotify/test ........................ ok
>>>> field_compare/test ................... ok
>>>> file_create/test ..................... ok
>>>> file_delete/test ..................... ok
>>>> file_permission/test ................. ok
>>>> file_rename/test ..................... ok
>>>> filter_exclude/test .................. ok
>>>> filter_exit/test ..................... ok
>>>> filter_saddr_fam/test ................ ok
>>>> filter_sessionid/test ................ ok
>>>> io_uring/test ........................ ok
>>>> login_tty/test ....................... ok
>>>> lost_reset/test ...................... ok
>>>> netfilter_pkt/test ................... Can't exec "nc": No such file 
>>>> or directory at netfilter_pkt/test line 83.
>>>>
>>>> Venkat, can you please re-run if possible and paste the log here.
>>>>
>>>> Thanks
>>>> Maddy
>>>>
>>>>
>>

Re: [PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Venkat Rao Bagalkote]

On 01/07/26 2:23 pm, Christophe Leroy (CS GROUP) wrote:
>
>
> Le 01/07/2026 à 10:09, Venkat Rao Bagalkote a écrit :
>>
>> On 01/07/26 10:26 am, Christophe Leroy (CS GROUP) wrote:
>>>
>>>
>>> Le 01/07/2026 à 06:32, Venkat Rao Bagalkote a écrit :
>>>>
>>>> On 01/07/26 7:44 am, Madhavan Srinivasan wrote:
>>>>>
>>>>> On 7/1/26 12:41 AM, Paul Moore wrote:
>>>>>> On Wed, May 13, 2026 at 1:42 AM Madhavan Srinivasan 
>>>>>> <maddy@linux.ibm.com> wrote:
>>>>>>> On 5/13/26 10:05 AM, Harsh Prateek Bora wrote:
>>>>>>>> On 11/03/26 12:49 am, Paul Moore wrote:
>>>>>>>>> On Tue, Mar 10, 2026 at 11:08 AM Christophe Leroy (CS GROUP)
>>>>>>>>> <chleroy@kernel.org> wrote:
>>>>>>>>>> From: Christophe Leroy <christophe.leroy@csgroup.eu>
>>>>>>>>>>
>>>>>>>>>> Commit e65e1fc2d24b ("[PATCH] syscall class hookup for all 
>>>>>>>>>> normal
>>>>>>>>>> targets") added generic support for AUDIT but that didn't 
>>>>>>>>>> include
>>>>>>>>>> support for bi-arch like powerpc.
>>>>>>>>>>
>>>>>>>>>> Commit 4b58841149dc ("audit: Add generic compat syscall 
>>>>>>>>>> support")
>>>>>>>>>> added generic support for bi-arch.
>>>>>>>>>>
>>>>>>>>>> Convert powerpc to that bi-arch generic audit support.
>>>>>>>>>>
>>>>>>>>>> With this change generated text is similar.
>>>>>>>>>>
>>>>>>>>>> Thomas has confirmed that the previously failing 
>>>>>>>>>> filter_exclude/test
>>>>>>>>>> is now successful both without and with this patch, see [1]
>>>>>>>>>>
>>>>>>>>>> [1]
>>>>>>>>>> https://eur01.safelinks.protection.outlook.com/? 
>>>>>>>>>> url=https%3A%2F%2Flore.kernel.org%2Fall%2F20260306115350- 
>>>>>>>>>> ef265661-6d6b-4043-9bd0-8e6b437d0d67%40linutronix.de%2F&data=05%7C02%7Cchristophe.leroy%40csgroup.eu%7C81e1e4e3bae245103d3308ded729bb47%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C639184771399964577%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=%2FtCHXFR5np67gntCnXqv7Eemo5WuwaIEcywxZQzDADA%3D&reserved=0
>>>>>>>>>>
>>>>>>>>>> Link: https://eur01.safelinks.protection.outlook.com/? 
>>>>>>>>>> url=https%3A%2F%2Fgithub.com%2Flinuxppc%2Fissues%2Fissues%2F412&data=05%7C02%7Cchristophe.leroy%40csgroup.eu%7C81e1e4e3bae245103d3308ded729bb47%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C639184771400190794%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=4fPEX7HuGBcxOcXlcJVQvDdP7Y9InhDpbz3z%2BS9lkCQ%3D&reserved=0 
>>>>>>>>>>
>>>>>>>>>> Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu>
>>>>>>>>>> Reviewed-by: Cédric Le Goater <clg@kaod.org>
>>>>>>>>>> ---
>>>>>>>>>> Venkat, a test result with
>>>>>>>>>> https://eur01.safelinks.protection.outlook.com/? 
>>>>>>>>>> url=https%3A%2F%2Fgithub.com%2Flinux-audit%2Faudit- 
>>>>>>>>>> testsuite&data=05%7C02%7Cchristophe.leroy%40csgroup.eu%7C81e1e4e3bae245103d3308ded729bb47%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C639184771400214912%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=yHp3p5zNx%2BqQg2cKBsKJADWcUcKVtZstzNScBfWzF%2FQ%3D&reserved=0 
>>>>>>>>>> would be appreciated.
>>>>>>>>> Yes, I'd like to see confirmation that the audit test suite 
>>>>>>>>> runs clean
>>>>>>>>> on ppc systems with this patch applied, and unfortunately 
>>>>>>>>> without a
>>>>>>>>> ppc system I have no way to test this myself.
>>>>>>> My bad, this is a miss from my end.
>>>>>>> Venkat is already on this and will update the results here.
>>>>>> Do we have an update on this?  Maybe I missed it, but I don't recall
>>>>>> seeing any test results.
>>>>> Venkat, did run the test but I guess he missed to respond here,
>>>>> Details of his test run that he shared me in the internal chat 
>>>>> from May 13.
>>>>
>>>>
>>>> Sorry, My bad. I missed updating here. Yes, this was tested in May. 
>>>> Please let me know, if a re-run is required?
>>>
>>> It looks like netcat 
>>> (https://eur01.safelinks.protection.outlook.com/? 
>>> url=https%3A%2F%2Flinux.die.net%2Fman%2F1%2Fnc&data=05%7C02%7Cchristophe.leroy%40csgroup.eu%7C97ac234e82884f729d1508ded7480f62%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C639184901648983046%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=18PJTLp9ozMqSkWWvBZmtjzjTI355Oq%2F5aqmU6zCiZE%3D&reserved=0) 
>>> is not installed in you setup. Are you able to install it and rerun 
>>> the test ?
>>
>>
>> I investigated the failure on the RHEL 10 ppc64le test system.
>>
>>
>> The netfilter_pkt failure is due to missing userspace dependencies:
>>
>> Can't exec "nc": No such file or directory
>> Can't exec "iptables": No such file or directory
>> Can't exec "ip6tables": No such file or directory
>>
>> I checked the system and confirmed that nc, ncat, iptables, and 
>> ip6tables are not installed:
>>
>>
>> which nc
>> which ncat
>> which iptables
>> which ip6tables
>>
>>
>> all return "not found".
>>
>> The system has nftables installed (/usr/sbin/nft), but I was unable 
>> to locate packages providing nc/ncat or iptables/ip6tables in the 
>> currently enabled repositories (epel, rh10_base, rh10_app, rh10_crb).
>
> Found:
> - 
> https://dl.fedoraproject.org/pub/epel/10/Everything/ppc64le/Packages/n/netcat-1.238-1.el10_3.ppc64le.rpm
> - 
> https://rpmfind.net/linux/RPM/almalinux-kitten/10/baseos/ppc64le/iptables-nft-1.8.11-6.el10.ppc64le.html
> - 
> https://www.rpmfind.net/linux/RPM/centos-stream/10/appstream/ppc64le/iptables-devel-1.8.11-14.el10.ppc64le.html
>
> Does it help ?
>
> Christophe


Hi Christophe,


Thanks for sharing the RPMs,they were very helpful.

I reran the audit-testsuite after installing the missing userspace 
dependencies that were identified earlier.

I installed:
     - netcat (nc)
     - iptables
     - ip6tables

Following this, the previously failing netfilter_pkt test is now passing:

     netfilter_pkt/test ................... ok


Current remaining issue:

1. amcast_joinpart
------------------
Still fails due to a missing Perl dependency:

     Can't locate Socket/Netlink.pm in @INC

I searched the configured repositories and could not find a package 
providing Socket::Netlink / Socket/Netlink.pm on this EL10 ppc64le system.

Latest run summary:

amcast_joinpart/test ................. Can't locate Socket/Netlink.pm in 
@INC (you may need to install the Socket::Netlink module) (@INC entries 
checked: /usr/local/lib64/perl5/5.40 /usr/local/share/perl5/5.40 
/usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl 
/usr/lib64/perl5 /usr/share/perl5 .) at amcast_joinpart/test line 10.
BEGIN failed--compilation aborted at amcast_joinpart/test line 10.
amcast_joinpart/test ................. Dubious, test returned 2 (wstat 
512, 0x200)
Failed 7/7 subtests
backlog_wait_time_actual_reset/test .. ok
bpf/test ............................. ok
exec_execve/test ..................... ok
exec_name/test ....................... ok
fanotify/test ........................ ok
field_compare/test ................... ok
file_create/test ..................... ok
file_delete/test ..................... ok
file_permission/test ................. ok
file_rename/test ..................... ok
filter_exclude/test .................. ok
filter_exit/test ..................... ok
filter_saddr_fam/test ................ ok
filter_sessionid/test ................ ok
io_uring/test ........................ ok
login_tty/test ....................... ok
lost_reset/test ...................... ok
netfilter_pkt/test ................... ok
signal/test .......................... ok
syscalls_file/test ................... ok
syscall_module/test .................. ok
time_change/test ..................... ok
user_msg/test ........................ ok

All tests now pass except amcast_joinpart, which is blocked by the 
missing Socket::Netlink Perl module.

Please let me know if there is a recommended package source for 
Socket::Netlink on EL10 ppc64le.

Regards,
Venkat.

>
>>
>>
>> At this point, the remaining failure appears to be an environmental 
>> dependency issue rather than a test failure. Please let me know if 
>> there is a recommended package/repository for EL10 ppc64le that 
>> provides netcat and iptables compatibility tools, and I can re-run 
>> the test.
>>
>>
>> Regards,
>>
>> Venkat.
>>
>>>
>>> Thanks
>>> Christophe
>>>
>>>>
>>>> Regards,
>>>>
>>>> Venkat.
>>>>
>>>>>
>>>>> backlog_wait_time_actual_reset/test .. ok
>>>>> bpf/test ............................. ok
>>>>> exec_execve/test ..................... ok
>>>>> exec_name/test ....................... ok
>>>>> fanotify/test ........................ ok
>>>>> field_compare/test ................... ok
>>>>> file_create/test ..................... ok
>>>>> file_delete/test ..................... ok
>>>>> file_permission/test ................. ok
>>>>> file_rename/test ..................... ok
>>>>> filter_exclude/test .................. ok
>>>>> filter_exit/test ..................... ok
>>>>> filter_saddr_fam/test ................ ok
>>>>> filter_sessionid/test ................ ok
>>>>> io_uring/test ........................ ok
>>>>> login_tty/test ....................... ok
>>>>> lost_reset/test ...................... ok
>>>>> netfilter_pkt/test ................... Can't exec "nc": No such 
>>>>> file or directory at netfilter_pkt/test line 83.
>>>>>
>>>>> Venkat, can you please re-run if possible and paste the log here.
>>>>>
>>>>> Thanks
>>>>> Maddy
>>>>>
>>>>>
>>>
>
>

Re: [PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Paul Moore]

On Thu, Jul 2, 2026 at 8:50 AM Venkat Rao Bagalkote
<venkat88@linux.ibm.com> wrote:
>
> Current remaining issue:
>
> 1. amcast_joinpart
> ------------------
> Still fails due to a missing Perl dependency:
>
>      Can't locate Socket/Netlink.pm in @INC
>
> I searched the configured repositories and could not find a package
> providing Socket::Netlink / Socket/Netlink.pm on this EL10 ppc64le system.
>
> Latest run summary:
>
> amcast_joinpart/test ................. Can't locate Socket/Netlink.pm in
> @INC (you may need to install the Socket::Netlink module) (@INC entries
> checked: /usr/local/lib64/perl5/5.40 /usr/local/share/perl5/5.40
> /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
> /usr/lib64/perl5 /usr/share/perl5 .) at amcast_joinpart/test line 10.
> BEGIN failed--compilation aborted at amcast_joinpart/test line 10.
> amcast_joinpart/test ................. Dubious, test returned 2 (wstat
> 512, 0x200)
> Failed 7/7 subtests
> backlog_wait_time_actual_reset/test .. ok
> bpf/test ............................. ok
> exec_execve/test ..................... ok
> exec_name/test ....................... ok
> fanotify/test ........................ ok
> field_compare/test ................... ok
> file_create/test ..................... ok
> file_delete/test ..................... ok
> file_permission/test ................. ok
> file_rename/test ..................... ok
> filter_exclude/test .................. ok
> filter_exit/test ..................... ok
> filter_saddr_fam/test ................ ok
> filter_sessionid/test ................ ok
> io_uring/test ........................ ok
> login_tty/test ....................... ok
> lost_reset/test ...................... ok
> netfilter_pkt/test ................... ok
> signal/test .......................... ok
> syscalls_file/test ................... ok
> syscall_module/test .................. ok
> time_change/test ..................... ok
> user_msg/test ........................ ok
>
> All tests now pass except amcast_joinpart, which is blocked by the
> missing Socket::Netlink Perl module.
>
> Please let me know if there is a recommended package source for
> Socket::Netlink on EL10 ppc64le.

Thanks for following up on this Venkat.

I'm adding your colleague Ricardo from the RH side of the house.
Ricardo is very familiar with audit and should be able to help you
with missing RHEL packages.

--
paul-moore.com

Re: [PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Ricardo Robaina]

On Thu, Jul 2, 2026 at 10:28 AM Paul Moore <paul@paul-moore.com> wrote:
>
> On Thu, Jul 2, 2026 at 8:50 AM Venkat Rao Bagalkote
> <venkat88@linux.ibm.com> wrote:
> >
> > Current remaining issue:
> >
> > 1. amcast_joinpart
> > ------------------
> > Still fails due to a missing Perl dependency:
> >
> >      Can't locate Socket/Netlink.pm in @INC
> >
> > I searched the configured repositories and could not find a package
> > providing Socket::Netlink / Socket/Netlink.pm on this EL10 ppc64le system.
> >
> > Latest run summary:
> >
> > amcast_joinpart/test ................. Can't locate Socket/Netlink.pm in
> > @INC (you may need to install the Socket::Netlink module) (@INC entries
> > checked: /usr/local/lib64/perl5/5.40 /usr/local/share/perl5/5.40
> > /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
> > /usr/lib64/perl5 /usr/share/perl5 .) at amcast_joinpart/test line 10.
> > BEGIN failed--compilation aborted at amcast_joinpart/test line 10.
> > amcast_joinpart/test ................. Dubious, test returned 2 (wstat
> > 512, 0x200)
> > Failed 7/7 subtests
> > backlog_wait_time_actual_reset/test .. ok
> > bpf/test ............................. ok
> > exec_execve/test ..................... ok
> > exec_name/test ....................... ok
> > fanotify/test ........................ ok
> > field_compare/test ................... ok
> > file_create/test ..................... ok
> > file_delete/test ..................... ok
> > file_permission/test ................. ok
> > file_rename/test ..................... ok
> > filter_exclude/test .................. ok
> > filter_exit/test ..................... ok
> > filter_saddr_fam/test ................ ok
> > filter_sessionid/test ................ ok
> > io_uring/test ........................ ok
> > login_tty/test ....................... ok
> > lost_reset/test ...................... ok
> > netfilter_pkt/test ................... ok
> > signal/test .......................... ok
> > syscalls_file/test ................... ok
> > syscall_module/test .................. ok
> > time_change/test ..................... ok
> > user_msg/test ........................ ok
> >
> > All tests now pass except amcast_joinpart, which is blocked by the
> > missing Socket::Netlink Perl module.
> >
> > Please let me know if there is a recommended package source for
> > Socket::Netlink on EL10 ppc64le.
>
> Thanks for following up on this Venkat.
>
> I'm adding your colleague Ricardo from the RH side of the house.
> Ricardo is very familiar with audit and should be able to help you
> with missing RHEL packages.

Thanks for looping me in,  Paul!

Venkat, unfortunately, perl-Socket-Netlink is not packaged for RHEL-10
ppc64le. An alternative is to use CPAN[1] to install the
Socket::Netlink Perl module.

 # dnf install cpan
 # cpan App::cpanminus
 # cpanm Socket::Netlink

I'll reserve a ppc64le machine and run the tests locally as well. I'll
share the results shortly.

[1] https://www.cpan.org/modules/INSTALL.html


>
> --
> paul-moore.com
>

Re: [PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Ricardo Robaina]

On Thu, Jul 2, 2026 at 3:19 PM Ricardo Robaina <rrobaina@redhat.com> wrote:
>
> On Thu, Jul 2, 2026 at 10:28 AM Paul Moore <paul@paul-moore.com> wrote:
> >
> > On Thu, Jul 2, 2026 at 8:50 AM Venkat Rao Bagalkote
> > <venkat88@linux.ibm.com> wrote:
> > >
> > > Current remaining issue:
> > >
> > > 1. amcast_joinpart
> > > ------------------
> > > Still fails due to a missing Perl dependency:
> > >
> > >      Can't locate Socket/Netlink.pm in @INC
> > >
> > > I searched the configured repositories and could not find a package
> > > providing Socket::Netlink / Socket/Netlink.pm on this EL10 ppc64le system.
> > >
> > > Latest run summary:
> > >
> > > amcast_joinpart/test ................. Can't locate Socket/Netlink.pm in
> > > @INC (you may need to install the Socket::Netlink module) (@INC entries
> > > checked: /usr/local/lib64/perl5/5.40 /usr/local/share/perl5/5.40
> > > /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
> > > /usr/lib64/perl5 /usr/share/perl5 .) at amcast_joinpart/test line 10.
> > > BEGIN failed--compilation aborted at amcast_joinpart/test line 10.
> > > amcast_joinpart/test ................. Dubious, test returned 2 (wstat
> > > 512, 0x200)
> > > Failed 7/7 subtests
> > > backlog_wait_time_actual_reset/test .. ok
> > > bpf/test ............................. ok
> > > exec_execve/test ..................... ok
> > > exec_name/test ....................... ok
> > > fanotify/test ........................ ok
> > > field_compare/test ................... ok
> > > file_create/test ..................... ok
> > > file_delete/test ..................... ok
> > > file_permission/test ................. ok
> > > file_rename/test ..................... ok
> > > filter_exclude/test .................. ok
> > > filter_exit/test ..................... ok
> > > filter_saddr_fam/test ................ ok
> > > filter_sessionid/test ................ ok
> > > io_uring/test ........................ ok
> > > login_tty/test ....................... ok
> > > lost_reset/test ...................... ok
> > > netfilter_pkt/test ................... ok
> > > signal/test .......................... ok
> > > syscalls_file/test ................... ok
> > > syscall_module/test .................. ok
> > > time_change/test ..................... ok
> > > user_msg/test ........................ ok
> > >
> > > All tests now pass except amcast_joinpart, which is blocked by the
> > > missing Socket::Netlink Perl module.
> > >
> > > Please let me know if there is a recommended package source for
> > > Socket::Netlink on EL10 ppc64le.
> >
> > Thanks for following up on this Venkat.
> >
> > I'm adding your colleague Ricardo from the RH side of the house.
> > Ricardo is very familiar with audit and should be able to help you
> > with missing RHEL packages.
>
> Thanks for looping me in,  Paul!
>
> Venkat, unfortunately, perl-Socket-Netlink is not packaged for RHEL-10
> ppc64le. An alternative is to use CPAN[1] to install the
> Socket::Netlink Perl module.
>
>  # dnf install cpan
>  # cpan App::cpanminus
>  # cpanm Socket::Netlink
>
> I'll reserve a ppc64le machine and run the tests locally as well. I'll
> share the results shortly.
>
> [1] https://www.cpan.org/modules/INSTALL.html
>
>
> >
> > --
> > paul-moore.com
> >

Hello everyone,

I built an RHEL-10 kernel with the patch applied and verified that
audit-testsuite passes successfully on a ppc64le machine. Please find
the logs below:

Tested-by: Ricardo Robaina <rrobaina@redhat.com>

---
# uname -m
ppc64le

# uname -r
6.12.0-245.test.el10.ppc64le

# make test
...
chmod +x */test
Running as   user    root
        with context unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
        on   system  RHEL10

amcast_joinpart/test ................. ok
backlog_wait_time_actual_reset/test .. ok
bpf/test ............................. ok
coredump/test ........................ ok
exec_execve/test ..................... ok
exec_name/test ....................... ok
fanotify/test ........................ ok
field_compare/test ................... ok
file_create/test ..................... ok
file_delete/test ..................... ok
file_permission/test ................. ok
file_rename/test ..................... ok
filter_device/test ................... ok
filter_exclude/test .................. ok
filter_exit/test ..................... ok
filter_inode/test .................... ok
filter_saddr_fam/test ................ ok
filter_sessionid/test ................ ok
io_uring/test ........................ ok
login_tty/test ....................... ok
lost_reset/test ...................... ok
netfilter_pkt/test ................... ok
signal/test .......................... ok
syscalls_file/test ................... ok
syscall_module/test .................. ok
time_change/test ..................... ok
user_msg/test ........................ ok
All tests successful.
Files=27, Tests=300, 252 wallclock secs ( 0.12 usr  0.01 sys + 54.34
cusr  1.38 csys = 55.85 CPU)
Result: PASS
make[1]: Leaving directory '/root/rrobaina/audit-testsuite/tests'
---

I hope it helps!
-Ricardo

Re: [PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Venkat Rao Bagalkote]

On 03/07/26 4:19 am, Ricardo Robaina wrote:
> On Thu, Jul 2, 2026 at 3:19 PM Ricardo Robaina <rrobaina@redhat.com> wrote:
>> On Thu, Jul 2, 2026 at 10:28 AM Paul Moore <paul@paul-moore.com> wrote:
>>> On Thu, Jul 2, 2026 at 8:50 AM Venkat Rao Bagalkote
>>> <venkat88@linux.ibm.com> wrote:
>>>> Current remaining issue:
>>>>
>>>> 1. amcast_joinpart
>>>> ------------------
>>>> Still fails due to a missing Perl dependency:
>>>>
>>>>       Can't locate Socket/Netlink.pm in @INC
>>>>
>>>> I searched the configured repositories and could not find a package
>>>> providing Socket::Netlink / Socket/Netlink.pm on this EL10 ppc64le system.
>>>>
>>>> Latest run summary:
>>>>
>>>> amcast_joinpart/test ................. Can't locate Socket/Netlink.pm in
>>>> @INC (you may need to install the Socket::Netlink module) (@INC entries
>>>> checked: /usr/local/lib64/perl5/5.40 /usr/local/share/perl5/5.40
>>>> /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
>>>> /usr/lib64/perl5 /usr/share/perl5 .) at amcast_joinpart/test line 10.
>>>> BEGIN failed--compilation aborted at amcast_joinpart/test line 10.
>>>> amcast_joinpart/test ................. Dubious, test returned 2 (wstat
>>>> 512, 0x200)
>>>> Failed 7/7 subtests
>>>> backlog_wait_time_actual_reset/test .. ok
>>>> bpf/test ............................. ok
>>>> exec_execve/test ..................... ok
>>>> exec_name/test ....................... ok
>>>> fanotify/test ........................ ok
>>>> field_compare/test ................... ok
>>>> file_create/test ..................... ok
>>>> file_delete/test ..................... ok
>>>> file_permission/test ................. ok
>>>> file_rename/test ..................... ok
>>>> filter_exclude/test .................. ok
>>>> filter_exit/test ..................... ok
>>>> filter_saddr_fam/test ................ ok
>>>> filter_sessionid/test ................ ok
>>>> io_uring/test ........................ ok
>>>> login_tty/test ....................... ok
>>>> lost_reset/test ...................... ok
>>>> netfilter_pkt/test ................... ok
>>>> signal/test .......................... ok
>>>> syscalls_file/test ................... ok
>>>> syscall_module/test .................. ok
>>>> time_change/test ..................... ok
>>>> user_msg/test ........................ ok
>>>>
>>>> All tests now pass except amcast_joinpart, which is blocked by the
>>>> missing Socket::Netlink Perl module.
>>>>
>>>> Please let me know if there is a recommended package source for
>>>> Socket::Netlink on EL10 ppc64le.
>>> Thanks for following up on this Venkat.
>>>
>>> I'm adding your colleague Ricardo from the RH side of the house.
>>> Ricardo is very familiar with audit and should be able to help you
>>> with missing RHEL packages.
>> Thanks for looping me in,  Paul!
>>
>> Venkat, unfortunately, perl-Socket-Netlink is not packaged for RHEL-10
>> ppc64le. An alternative is to use CPAN[1] to install the
>> Socket::Netlink Perl module.
>>
>>   # dnf install cpan
>>   # cpan App::cpanminus
>>   # cpanm Socket::Netlink
>>
>> I'll reserve a ppc64le machine and run the tests locally as well. I'll
>> share the results shortly.
>>
>> [1] https://www.cpan.org/modules/INSTALL.html
>>
Thanks for the RPM's Ricardo.

I installed the missing dependencies (netcat, iptables, ip6tables) and 
rebuilt the kernel with arp_tables available as a module. I also 
installed Socket::Netlink using:

     cpanm --mirror https://cpan.metacpan.org --mirror-only Socket::Netlink

After these changes, I reran audit-testsuite and all tests are now passing:

     Files=24, Tests=279

     Result: PASS


amcast_joinpart/test ................. ok
backlog_wait_time_actual_reset/test .. ok
bpf/test ............................. ok
exec_execve/test ..................... ok
exec_name/test ....................... ok
fanotify/test ........................ ok
field_compare/test ................... ok
file_create/test ..................... ok
file_delete/test ..................... ok
file_permission/test ................. ok
file_rename/test ..................... ok
filter_exclude/test .................. ok
filter_exit/test ..................... ok
filter_saddr_fam/test ................ ok
filter_sessionid/test ................ ok
io_uring/test ........................ ok
login_tty/test ....................... ok
lost_reset/test ...................... ok
netfilter_pkt/test ................... ok
signal/test .......................... ok
syscalls_file/test ................... ok
syscall_module/test .................. ok
time_change/test ..................... ok
user_msg/test ........................ ok


Paul/Christophe/Maddy,

Hope we are good now. Please let me know, if anything else needs to be done.


Regards,

Venkat.

>>> --
>>> paul-moore.com
>>>
> Hello everyone,
>
> I built an RHEL-10 kernel with the patch applied and verified that
> audit-testsuite passes successfully on a ppc64le machine. Please find
> the logs below:
>
> Tested-by: Ricardo Robaina <rrobaina@redhat.com>
>
> ---
> # uname -m
> ppc64le
>
> # uname -r
> 6.12.0-245.test.el10.ppc64le
>
> # make test
> ...
> chmod +x */test
> Running as   user    root
>          with context unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
>          on   system  RHEL10
>
> amcast_joinpart/test ................. ok
> backlog_wait_time_actual_reset/test .. ok
> bpf/test ............................. ok
> coredump/test ........................ ok
> exec_execve/test ..................... ok
> exec_name/test ....................... ok
> fanotify/test ........................ ok
> field_compare/test ................... ok
> file_create/test ..................... ok
> file_delete/test ..................... ok
> file_permission/test ................. ok
> file_rename/test ..................... ok
> filter_device/test ................... ok
> filter_exclude/test .................. ok
> filter_exit/test ..................... ok
> filter_inode/test .................... ok
> filter_saddr_fam/test ................ ok
> filter_sessionid/test ................ ok
> io_uring/test ........................ ok
> login_tty/test ....................... ok
> lost_reset/test ...................... ok
> netfilter_pkt/test ................... ok
> signal/test .......................... ok
> syscalls_file/test ................... ok
> syscall_module/test .................. ok
> time_change/test ..................... ok
> user_msg/test ........................ ok
> All tests successful.
> Files=27, Tests=300, 252 wallclock secs ( 0.12 usr  0.01 sys + 54.34
> cusr  1.38 csys = 55.85 CPU)
> Result: PASS
> make[1]: Leaving directory '/root/rrobaina/audit-testsuite/tests'
> ---
>
> I hope it helps!
> -Ricardo
>
>

Re: [PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Paul Moore]

On Mon, Jul 6, 2026 at 4:29 AM Venkat Rao Bagalkote
<venkat88@linux.ibm.com> wrote:
> On 03/07/26 4:19 am, Ricardo Robaina wrote:
> > On Thu, Jul 2, 2026 at 3:19 PM Ricardo Robaina <rrobaina@redhat.com> wrote:
> >> On Thu, Jul 2, 2026 at 10:28 AM Paul Moore <paul@paul-moore.com> wrote:
> >>> On Thu, Jul 2, 2026 at 8:50 AM Venkat Rao Bagalkote
> >>> <venkat88@linux.ibm.com> wrote:

...

> Thanks for the RPM's Ricardo.
>
> I installed the missing dependencies (netcat, iptables, ip6tables) and
> rebuilt the kernel with arp_tables available as a module. I also
> installed Socket::Netlink using:
>
>      cpanm --mirror https://cpan.metacpan.org --mirror-only Socket::Netlink
>
> After these changes, I reran audit-testsuite and all tests are now passing:
>
>      Files=24, Tests=279
>
>      Result: PASS
>
> amcast_joinpart/test ................. ok
> backlog_wait_time_actual_reset/test .. ok
> bpf/test ............................. ok
> exec_execve/test ..................... ok
> exec_name/test ....................... ok
> fanotify/test ........................ ok
> field_compare/test ................... ok
> file_create/test ..................... ok
> file_delete/test ..................... ok
> file_permission/test ................. ok
> file_rename/test ..................... ok
> filter_exclude/test .................. ok
> filter_exit/test ..................... ok
> filter_saddr_fam/test ................ ok
> filter_sessionid/test ................ ok
> io_uring/test ........................ ok
> login_tty/test ....................... ok
> lost_reset/test ...................... ok
> netfilter_pkt/test ................... ok
> signal/test .......................... ok
> syscalls_file/test ................... ok
> syscall_module/test .................. ok
> time_change/test ..................... ok
> user_msg/test ........................ ok
>
>
> Paul/Christophe/Maddy,
>
> Hope we are good now. Please let me know, if anything else needs to be done.

That's great, thank you for verifying all of it works as expected!

-- 
paul-moore.com

Re: [PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Madhavan Srinivasan]

On Tue, 10 Mar 2026 16:08:07 +0100, Christophe Leroy (CS GROUP) wrote:
> Commit e65e1fc2d24b ("[PATCH] syscall class hookup for all normal
> targets") added generic support for AUDIT but that didn't include
> support for bi-arch like powerpc.
> 
> Commit 4b58841149dc ("audit: Add generic compat syscall support")
> added generic support for bi-arch.
> 
> [...]

Applied to powerpc/next.

[1/1] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC
      https://git.kernel.org/powerpc/c/f26ad12356a275ab303d5d3af4790ad94acc20d7

cheers

Re: [PATCH v3] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC

[Paul Moore]

On Wed, Apr 8, 2026 at 12:28 AM Madhavan Srinivasan <maddy@linux.ibm.com> wrote:
>
> On Tue, 10 Mar 2026 16:08:07 +0100, Christophe Leroy (CS GROUP) wrote:
> > Commit e65e1fc2d24b ("[PATCH] syscall class hookup for all normal
> > targets") added generic support for AUDIT but that didn't include
> > support for bi-arch like powerpc.
> >
> > Commit 4b58841149dc ("audit: Add generic compat syscall support")
> > added generic support for bi-arch.
> >
> > [...]
>
> Applied to powerpc/next.
>
> [1/1] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC
>       https://git.kernel.org/powerpc/c/f26ad12356a275ab303d5d3af4790ad94acc20d7

I never saw a follow-up demonstrating that the audit test suite runs
clean with this change.

Madhavan, did you test this before merging?

-- 
paul-moore.com