audit.33 kernel

David Woodhouse dwmw2 at infradead.org
Tue May 10 16:10:27 UTC 2005


An audit.33 kernel is uploading, again to the original yum repository on
ftp.uk.linux.org. It fixes the lack of audit_filesystem_init() call in
audit_init(), and adds the suggested parameter to audit_expand() to
specify how much to expand the skb by.

There's an audit.34 building, with a different fix for the avc deadlock
which was observed, and with module signing disabled on ppc64.

There'll probably also be an audit.35 by the end of the day too, with
errors from netlink_unicast() in audit_send_reply() handled, and with
the abuse of va_args in audit_log_vformat() fixed. 

You're not allowed to use va_args twice, so this is wrong:

	len = vsnprintf(skb->tail, avail, fmt, args);
	if (len >= avail) {
		 <...>
		len = vsnprintf(skb->tail, avail, fmt, args);

-- 
dwmw2




More information about the Linux-audit mailing list