[PATCH] auditctl Running In QEMU

[Nathaniel Husted]

As far as I can tell the numbers seem to be OK. I haven't been able to
do a thorough check all but the system calls I have tested appear to
match (socketcall, open, close, read, write). I think a thorough
testing should be done. I haven't had time to perform any testing
quite to this level.

Cheers,
Nathaniel


On Mon, Aug 27, 2012 at 7:32 AM, Steve Grubb <sgrubb at redhat.com> wrote:
> On Friday, June 15, 2012 01:23:13 PM Nathaniel Husted wrote:
>> The current stable version of ARM will not run in QEMU and errors with
>> an "unknown machine type" error. The following patch adds two machine
>> times to the ARMEB machine architecture. "armv5tejl" is the type
>> returned by uname -m when running the versatilepb machine type with a
>> default CPU (under Debian Squeeze 6.0). "armv7l" is return by uname -m
>> when run on a Samgsung Galaxy S SGH-I897 phone.
>
> Are the syscall numbers OK? IOW, with this change auditing works correctly on
> those systems?
>
> -Steve
>
>> Signed-off by: Nathaniel Husted <nhusted at gmail.com>
>>
>> diff -rpuN audit-2.2.1/lib/machinetab.h audit-2.2.1-patched/lib/machinetab.h
>> --- audit-2.2.1/lib/machinetab.h      2012-03-23 08:42:44.000000000 -0400 +++
>> audit-2.2.1-patched/lib/machinetab.h  2012-06-15 16:18:33.069787303 -0400 @@
>> -35,4 +35,6 @@ _S(MACH_ALPHA,   "alpha"  )
>>  #endif
>>  #ifdef WITH_ARMEB
>>  _S(MACH_ARMEB,   "armeb"  )
>> +_S(MACH_ARMEB,        "armv5tejl")
>> +_S(MACH_ARMEB,        "armv7l")
>>  #endif
>>
>> --
>> Linux-audit mailing list
>> Linux-audit at redhat.com
>> https://www.redhat.com/mailman/listinfo/linux-audit