Bug 702279 - "autrace -r /bin/ls" fails to insert audit rules on s390x, ppc64 and i386
Summary: "autrace -r /bin/ls" fails to insert audit rules on s390x, ppc64 and i386
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: audit
Version: 5.6
Hardware: All
OS: Unspecified
medium
medium
Target Milestone: rc
: ---
Assignee: Steve Grubb
QA Contact: Ondrej Moriš
URL:
Whiteboard:
Depends On:
Blocks: 700492
TreeView+ depends on / blocked
 
Reported: 2011-05-05 09:28 UTC by Eduard Benes
Modified: 2012-02-21 06:38 UTC (History)
1 user (show)

Fixed In Version: audit-1.8-1.el5
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-02-21 06:38:07 UTC
Target Upstream Version:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2012:0265 0 normal SHIPPED_LIVE audit bug fix and enhancement update 2012-02-20 15:06:31 UTC

Description Eduard Benes 2011-05-05 09:28:41 UTC
Description of problem:
On s390x, ppc64, and i386 autrace fails to insert audit rules to trace a process.

Version-Release number of selected component (if applicable):
audit-1.7.18-2.el5

How reproducible:
always

Steps to Reproduce:
1. # autrace -r /bin/ls
2.
3.
  
Actual results:
# autrace -r /bin/ls
Waiting to execute: /bin/ls
Error inserting audit rule for pid=8053

Expected results:
# autrace -r /bin/ls
Waiting to execute: /bin/ls
 <... some files listed here ...>
Cleaning up...
Trace complete. You can locate the records with 'ausearch -i -p 7322'

Additional info:
It works correctly on x86_64 and ia64.

Comment 1 RHEL Program Management 2011-05-31 14:46:34 UTC
This request was evaluated by Red Hat Product Management for
inclusion in the current release of Red Hat Enterprise Linux.
Because the affected component is not scheduled to be updated in the
current release, Red Hat is unfortunately unable to address this
request at this time. Red Hat invites you to ask your support
representative to propose this request, if appropriate and relevant,
in the next release of Red Hat Enterprise Linux.

Comment 2 Steve Grubb 2011-10-27 15:40:10 UTC
audit-1.8-1.el5 was built to address this problem.

Comment 5 errata-xmlrpc 2012-02-21 06:38:07 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2012-0265.html


Note You need to log in before you can comment on or make changes to this bug.