Bug 218484

Summary:	LSPP: Audit unable to add tgkill syscall rule
Product:	Red Hat Enterprise Linux 5	Reporter:	Kylene J Hall <kylene>
Component:	audit	Assignee:	Steve Grubb <sgrubb>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Brian Brock <bbrock>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	5.0	CC:	iboverma
Target Milestone:	---
Target Release:	---
Hardware:	s390x
OS:	Linux
Whiteboard:
Fixed In Version:	RC	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-02-08 01:22:56 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Kylene J Hall 2006-12-05 18:25:54 UTC

Description of problem:
Unable to add an audit rule for tgkill.

Version-Release number of selected component (if applicable):
audit-1.2.9-1.el5

How reproducible:
Easily

Steps to Reproduce:
1. newrole -r auditadm_r
2. auditctl -a exit,always -S tgkill
  
Actual results:
Syscall name unknown: tgkill

Expected results:
Zero return code to indicate success.

Comment 1 Steve Grubb 2006-12-05 19:07:00 UTC

Ok, simple fix. I have this patched in my source code. Before I commit this fix,
is this the only syscall that is missing on any arch? Thanks.

Comment 2 RHEL Program Management 2006-12-05 19:30:17 UTC

This request was evaluated by Red Hat Product Management for inclusion in a Red
Hat Enterprise Linux major release.  Product Management has requested further
review of this request by Red Hat Engineering, for potential inclusion in a Red
Hat Enterprise Linux Major release.  This request is not yet committed for
inclusion.

Comment 3 Kylene J Hall 2006-12-05 23:01:34 UTC

Its the only one I know of.

Comment 6 Steve Grubb 2006-12-11 00:23:38 UTC

audit-1.3.1-1 was built to solve this problem. We are uptream for this package
and I collected all the patches we were applying and put them in the tar file.

Comment 7 Jay Turner 2006-12-14 12:32:58 UTC

QE ack for RHEL5 based on LSPP need.

Comment 8 Kylene J Hall 2006-12-29 00:45:35 UTC

I have verified that this bug is fixed in Snapshot 5.

Comment 9 RHEL Program Management 2007-02-08 01:22:56 UTC

A package has been built which should help the problem described in 
this bug report. This report is therefore being closed with a resolution 
of CURRENTRELEASE. You may reopen this bug report if the solution does 
not work for you.