Red Hat Bugzilla – Bug 218484
LSPP: Audit unable to add tgkill syscall rule
Last modified: 2007-11-30 17:07:38 EST
Description of problem:
Unable to add an audit rule for tgkill.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. newrole -r auditadm_r
2. auditctl -a exit,always -S tgkill
Syscall name unknown: tgkill
Zero return code to indicate success.
Ok, simple fix. I have this patched in my source code. Before I commit this fix,
is this the only syscall that is missing on any arch? Thanks.
This request was evaluated by Red Hat Product Management for inclusion in a Red
Hat Enterprise Linux major release. Product Management has requested further
review of this request by Red Hat Engineering, for potential inclusion in a Red
Hat Enterprise Linux Major release. This request is not yet committed for
Its the only one I know of.
audit-1.3.1-1 was built to solve this problem. We are uptream for this package
and I collected all the patches we were applying and put them in the tar file.
QE ack for RHEL5 based on LSPP need.
I have verified that this bug is fixed in Snapshot 5.
A package has been built which should help the problem described in
this bug report. This report is therefore being closed with a resolution
of CURRENTRELEASE. You may reopen this bug report if the solution does
not work for you.