deadlock/hang

David Woodhouse dwmw2 at infradead.org
Wed Jun 29 20:17:17 UTC 2005


On Wed, 2005-06-29 at 16:07 -0400, Steve Grubb wrote:
> auditctl -a entry,always -S socketcall
> 
> is what triggers the hang. I remember auditing socket calls when
> working on ausearch interpretation code. So I booted into old kernels.
> 
> .61 runs, but starts heavy disk activity.
> .62 runs, but reports backlog overflow to console
> .63 hangs.

Hm. I cannot reproduce this on my i686 SMP test box. I'll try harder in
the morning. Can you reproduce it without auditd running? Can you show
the audit messages which were being logged at the time?

-- 
dwmw2




More information about the Linux-audit mailing list