audit-0.6.4 released

[Chris Wright]

* Steve Grubb (sgrubb at redhat.com) wrote:
> Aside from the pam change, this release is being done because I have fixed 2-3
> very important bugs. There were 2 mistakes in the way that out of disk space 
> was being calculated and handled. Also a bug in the handling of suspended 
> logging. These could lead to netlink socket busy conditions and ultimately an 
> unresponsive system.

Hehe uh-oh...

fstatfs(1, {f_type="DEVPTS_SUPER_MAGIC", f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={0, 0}, f_namelen=255, f_frsize=4096}) = 0

As you can see, /dev/pts/$PTS has f_bavail=0 ;-)

Here's enough to keep auditd -f working during testing.  Maybe you've
got a better idea.

thanks,
-chris
-- 

--- audit-0.6.4-orig/src/auditd-event.c	2005-02-23 14:37:59.000000000 -0800
+++ audit-0.6.4/src/auditd-event.c	2005-02-25 17:53:10.000000000 -0800
@@ -297,6 +297,9 @@ static void check_space_left(int lfd, st
 	int rc;
 	struct statfs buf;
 
+	if (isatty(lfd))
+		return;
+
         rc = fstatfs(lfd, &buf);
         if (rc == 0) {
 		if (buf.f_bavail < 5) {