audit 1.2.2 released

Michael C Thompson thompsmc at us.ibm.com
Thu May 25 15:22:22 UTC 2006


James Antill wrote:
> On Thu, 2006-05-25 at 08:48 -0500, Michael C Thompson wrote:
> 
>> Do you mean to say that embedded audit_log_user_message() inside a loop 
>> changes it's return code?
> 
>  Sorry, my explanation probably wasn't clear.
>  It changes from the first to the second invocation, the first is always
> -1 the second is always 0 (on boot, only, after boot the first succeeds
> as well).

This is interesting, that does seem like we're being denied for the 
first attempt of actions against the kernel... you said you've seen this 
in the targeted policy? (I've only seen this problem with the MLS policy)

Mike




More information about the Linux-audit mailing list