Bug 507561 - Removal of directory doesn't produce audit record if rule is recursive
Summary: Removal of directory doesn't produce audit record if rule is recursive
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: kernel
Version: 5.3
Hardware: All
OS: Linux
Target Milestone: rc
: ---
Assignee: Jiri Pirko
QA Contact: Red Hat Kernel QE team
Depends On: 501321
TreeView+ depends on / blocked
Reported: 2009-06-23 10:30 UTC by RHEL Program Management
Modified: 2015-05-05 01:17 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Last Closed: 2009-08-04 13:16:23 UTC
Target Upstream Version:

Attachments (Terms of Use)

System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2009:1193 0 normal SHIPPED_LIVE Important: kernel security and bug fix update 2009-08-04 13:15:15 UTC

Description RHEL Program Management 2009-06-23 10:30:30 UTC
This bug has been copied from bug #501321 and has been proposed
to be backported to 5.3 z-stream (EUS).

Comment 3 Jiri Pirko 2009-07-07 10:59:47 UTC
in kernel-2.6.18-128.1.17.el

Comment 6 Murray McAllister 2009-08-03 00:56:13 UTC
Bug description:

* using an audit rule to recursively watch a directory, and then deleting
that directory, only resulted in an audit record of the audit rule being
removed, and not the directory.

Comment 8 errata-xmlrpc 2009-08-04 13:16:23 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.


Note You need to log in before you can comment on or make changes to this bug.