[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [patch] fix syscall speedup patch mips typo



On Wednesday 15 March 2006 11:58, Linda Knippers wrote:
> I also get a message of type UNKNOWN, more AVCs with the
> same serial number and then the serial number increments and I get
> a bunch more stuff.  See below.  What's type 1310?

SYSCALL_PARTIAL. audit 1.1.5 knows what that is.

I'm seeing the something similar and was just talking with Jason about it. We 
are still mulling over what's really happening. Is it stacking contexts or 
something weird happening on output.

On my system, I had a hald avc message repeat 5 times. It was nothing to do 
with socketcall. The trick to recreating the problem seems to be not having 
audit rules loaded and letting normal system avcs do their thing.

-Steve


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]