From: Steve G <linux_4ever_at_yahoo.com>
Date: Sun, 24 Apr 2005 09:28:26 -0700 (PDT)

>I get audit messages that look like this (with lots of
>extra whitespace) for my new GConf domain. Any idea what
>can cause this?

This sounds like an old kernel bug. There was a patch on the audit mail list that fixes it. It is pending being merged in the mm kernel. It only affects syslog messages. If you use the audit daemon, you won't see the problem.

-Steve Grubb

• linux/kernel/audit.c.orig 2005-02-16 13:49:28.839925080 -0500 +++ linux/kernel/audit.c 2005-02-16 13:53:24.757060224 -0500 @@ -513,8 +513,8 @@ if (!audit_pid) { /* No daemon */ int offset = ab->nlh ? NLMSG_SPACE(0) : 0; int len = skb->len - offset; - printk(KERN_ERR "%*.*s\n", - len, len, skb->data + offset); + skb->data[offset + len] = '\0'; + printk(KERN_ERR "%s\n", skb->data + offset); } kfree_skb(skb); ab->nlh = NULL;

  ---

Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Received on Sun 24 Apr 2005 - 12:34:49 EDT