Bug 702279

Summary:	"autrace -r /bin/ls" fails to insert audit rules on s390x, ppc64 and i386
Product:	Red Hat Enterprise Linux 5	Reporter:	Eduard Benes <ebenes>
Component:	audit	Assignee:	Steve Grubb <sgrubb>
Status:	CLOSED ERRATA	QA Contact:	Ondrej Moriš <omoris>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	5.6	CC:	omoris
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Unspecified
Whiteboard:
Fixed In Version:	audit-1.8-1.el5	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-02-21 06:38:07 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Bug Depends On:
Bug Blocks:	700492

Description Eduard Benes 2011-05-05 09:28:41 UTC

Description of problem:
On s390x, ppc64, and i386 autrace fails to insert audit rules to trace a process.

Version-Release number of selected component (if applicable):
audit-1.7.18-2.el5

How reproducible:
always

Steps to Reproduce:
1. # autrace -r /bin/ls
2.
3.
  
Actual results:
# autrace -r /bin/ls
Waiting to execute: /bin/ls
Error inserting audit rule for pid=8053

Expected results:
# autrace -r /bin/ls
Waiting to execute: /bin/ls
 <... some files listed here ...>
Cleaning up...
Trace complete. You can locate the records with 'ausearch -i -p 7322'

Additional info:
It works correctly on x86_64 and ia64.

Comment 1 RHEL Program Management 2011-05-31 14:46:34 UTC

This request was evaluated by Red Hat Product Management for
inclusion in the current release of Red Hat Enterprise Linux.
Because the affected component is not scheduled to be updated in the
current release, Red Hat is unfortunately unable to address this
request at this time. Red Hat invites you to ask your support
representative to propose this request, if appropriate and relevant,
in the next release of Red Hat Enterprise Linux.

Comment 2 Steve Grubb 2011-10-27 15:40:10 UTC

audit-1.8-1.el5 was built to address this problem.

Comment 5 errata-xmlrpc 2012-02-21 06:38:07 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2012-0265.html