audit-0.6.2 released

[Peter Martuccelli]

Hello,

On Fri, 2005-02-11 at 15:22, Stephen Smalley wrote:
> On Fri, 2005-02-11 at 15:29, Steve Grubb wrote:
> > Sort of. It fixes the one you saw. However, the corruption Peter was chasing 
> > is probably not related. This was a userspace fix. I think there is a 
> > separate kernel side one that's been discussed in the SE Linux mail list.
> 
> Yes, we saw corruption in the SELinux avc messages prior to any use of
> auditd at all, when everything was still being handled by klogd.
The corruption I was able to track down was in the kernel, this patch
will fix the problem, (the problem I saw was corrupted avc messages
which always started with 118 leading white spaces).  This is not a
final patch as I still need to determine what the issue is with printk. 
The "%*.*s" format specifier is not popular in the kernel, iirc it is
only used in a few routines, which include the audit and avc routines.

So yes there is a separate kernel side issue dealing with corrupted avc
messages. 
 

Regards,

Peter




-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: audit-corrupt-avc.patch
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20050216/32c5eb3c/attachment.ksh>