Audit not recording the correct syscall return value in Fedora 10?

[Paul Moore]

On Tuesday 05 May 2009 03:07:36 pm Tony Jones wrote:
> On Tue, May 05, 2009 at 02:22:04PM -0400, Paul Moore wrote:
> > I believe Matt Anderson (CC'd) reported the bug you are referring to and
> > the workaround I posted seemed to fix the issue for him.  I've stopped
> > looking
>
> I'll check it out, I see the commit:
> 6d208da89aabee8502debe842832ca0ab298d16d

Well, that commit does solve a return value problem on 64 bit systems but it 
isn't the workaround I was referring to ... the mail which I sent that started 
this thread (April 7, 2009) has a small patch to arch/x86/kernel/entry_64.S to 
load the return value directly from the stack and not %rax to workaround the 
corruption issue.

-- 
paul moore
linux @ hp