Re: [PATCH] audit: add ppc64 mach support
On Tuesday, December 02, 2014 04:27:24 PM Richard Guy Briggs wrote:
On 14/12/02, Paul Moore wrote:
> On Monday, December 01, 2014 03:58:09 PM Tony Jones wrote:
> > Mainline kernel reports ppc64le (per
> > a0588015deab1844261b27a67ae6f5b910fe2830) but there is no matching
> > AUDIT_ARCH_PPC64LE. Eric just pinged me on irc about it. Fix to add
> > it
> > to include/uapi/linux/audit.h shoudld probably go upstream.
>
> Untested, uncompiled too, but beyond the patch below, is there anything
> else we would need in the kernel to enable proper ppc64le support?
Which kernel are you using? syscall_get_arch() already exists on
powerpc. audit_syscall_entry() lost its first argument recently...
That patch was on top of the linux-audit tree, it's based on v3.16 so I
imagine there have been some changes upstream over the past few months.
What if it is in compatibility mode?
/me shrugs ... that's why I posted it asking for feedback ;) I just wanted to
get the ball rolling on a fix.
--
paul moore
www.paul-moore.com