Package: libaudit0
Version: 1:1.7.18-1.1
Severity: normal
File: libaudit
Dear Maintainer,
While trying to figure out why readahead collector fails with:
readahead-collector: cannot insert audit rules
I seem to have tracked down the problem to libaudit (and libaudit-dev)
auditctl (from auditd package) doesn't work on the ARM machine:
# auditctl -a exit,always -S open -S truncate -F success=0
Error detecting machine type
String it's failing on (our own machine):
Linux lophilo1 3.4.0-rc7+ #19 Fri Jul 13 17:24:39 CST 2012
armv5tejl GNU/Linux
More specifically, does not support this machine type:
# uname -m
armv5tejl
The chain of calls:
audit-1.7.18/lib/libaudit.c:audit_rule_syscallbyname_data
if (!audit_elf)
machine = audit_detect_machine();
else
machine = audit_elf_to_machine(audit_elf);
this is:
int audit_detect_machine(void)
{
struct utsname uts;
if (uname(&uts) == 0)
// strcpy(uts.machine, "x86_64");
return audit_name_to_machine(uts.machine);
return -1;
}
...and audit-1.7.18/lib/lookup_table.c:audit_name_to_machine
int audit_name_to_machine(const char *machine)
{
int res;
if (machine_s2i(machine, &res) != 0)
return res;
return -1;
}
I believe this package need to upgrade to 1.8 to properly support ARM:
https://fedorahosted.org/audit/browser/branches/1.8/lib/lookup_table.c
78 #ifdef WITH_ARMEB
79 { MACH_ARMEB, AUDIT_ARCH_ARMEB }
80 #endif
-- System Information:
Debian Release: wheezy/sid
APT prefers testing
APT policy: (900, 'testing')
Architecture: armel (armv5tejl)
Kernel: Linux 3.4.0-rc7+
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages libaudit0 depends on:
ii libc6 2.13-32
libaudit0 recommends no packages.
libaudit0 suggests no packages.
-- no debconf information
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
