[PATCH 2/2] audit: do not select HAVE_ARCH_AUDITSYSCALL on x32
Eric Paris
eparis at redhat.com
Thu May 29 03:09:59 UTC 2014
When x32 was introduced it assumed that it would get syscall audit for
free (since it works for x86 and x86_64). However, the audit system
assumed that the syscall table has less that 2048 entries. This is not
the case for x32 (or it is, kinda sorta)
Since audit syscall does not work on x32 stop selecting it.
Signed-off-by: Eric Paris <eparis at redhat.com>
Cc: Andy Lutomirski <luto at amacapital.net>
---
arch/x86/Kconfig | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig
index 56f47ca..e11c4da 100644
--- a/arch/x86/Kconfig
+++ b/arch/x86/Kconfig
@@ -125,7 +125,7 @@ config X86
select RTC_LIB
select HAVE_DEBUG_STACKOVERFLOW
select HAVE_IRQ_EXIT_ON_IRQ_STACK if X86_64
- select HAVE_ARCH_AUDITSYSCALL
+ select HAVE_ARCH_AUDITSYSCALL if !X86_X32
config INSTRUCTION_DECODER
def_bool y
--
1.9.0
More information about the Linux-audit
mailing list