[redhat-lspp] SE Linux messages in current kernel

Dustin Kirkland dustin.kirkland at us.ibm.com
Fri Nov 11 01:18:18 UTC 2005


On Thu, 2005-11-10 at 14:38 -0600, Dustin Kirkland wrote:
> On Thu, 2005-11-10 at 09:06 -0500, Steve Grubb wrote:
> > I am using rawhide with all current SE Linux tools & 2.6.14-1.1639.2.2_FC5 
> > kernel on an x86_64 machine. I am seeing this:
> > 
> > Nov 10 08:47:49 localhost kernel: audit: security_getprocattr error in 
> > audit_log_task_context
> > Nov 10 08:47:52 localhost last message repeated 19 times
> > 
> > Not sure where this is coming from other than kernel. Is someone looking into 
> > this? Do we want it in bugzilla?
> 
> Steve-
> 
> I'm looking into this.

Ok, trivial fix.  There was a missing return near the end of
audit_log_task_context()--so even successful calls to this function were
rolling through the error_path label.

David-

I'm going to roll this into a soon-to-come patch that fixes a couple of
issues and takes care of those warnings that auditsc.c are throwing.  


:-Dustin


--- kernel/auditsc.c.orig	2005-11-10 19:13:04.000000000 -0600
+++ kernel/auditsc.c	2005-11-10 19:13:28.000000000 -0600
@@ -898,6 +898,7 @@ static void audit_log_task_context(struc
 		goto error_path;
 
 	audit_log_format(ab, " subj=%s", ctx);
+	return;
 
 error_path:
 	if (ctx)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20051110/63107b14/attachment.sig>


More information about the Linux-audit mailing list