Le Sat, 1 Dec 2012 14:24:39 +0100,
Ivo De Decker <[email protected]> a écrit :
> Hi,
>
> On Sat, Nov 24, 2012 at 11:58:08PM +0100, Ivo De Decker wrote:
> > Based on the upstream changes for arm, I created a new version of
> > audit for wheezy. The debdiff is attached.
> >
> > This new version builds fine (tested on amd64 and armel). It works
> > fine on amd64. On armel, I don't get the old error anymore, but now
> > I get:
> >
> > Error sending add rule request (Invalid argument)
> >
> > It seems this is because my kernel doesn't have AUDITSYSCALL. This
> > is because AUDITSYSCALL depends on (ARM && AEABI && !OABI_COMPAT),
> > and as far as I can see, debian only ships arm kernels with AEABI
> > and OABI_COMPAT enabled.
>
> I tested the patch on a kernel with AUDITSYSCALL, and it works fine.
> I will file a bug to ask pre-approval from the release team.
I'm currently fixing this in experimental. I'm only adding the ARM
syscall table (--with-armeb) on arm{el,hf} as it increase the size of
the libaudit package of ~8k.
Enabling this on other architecture would only be needed if audit was
serving as a log collector.
What do you think?
Laurent Bigonville
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]