Created attachment 327635 [details]
patch fixing problems described herein

Description of problem:
The mkfontscale program uses the freetype library. Our IDS work shows that the freetype library causes mmap syscalls with EINVAL return codes. This is because its not checking the length of the file before calling mmap. If the file is opened readonly and the length is 0, the kernel does not like it.


How reproducible:
always

Steps to Reproduce:
1. add to audit rules: -a always,exit -S mmap -F exit=-ENIVAL -k einval
2. reboot system
3. ausearch --start recent -k einval