Re: audit-0.6.4 released
* Steve Grubb (sgrubb(a)redhat.com) wrote:
Aside from the pam change, this release is being done because I have
fixed 2-3
very important bugs. There were 2 mistakes in the way that out of disk space
was being calculated and handled. Also a bug in the handling of suspended
logging. These could lead to netlink socket busy conditions and ultimately an
unresponsive system.
Hehe uh-oh...
fstatfs(1, {f_type="DEVPTS_SUPER_MAGIC", f_bsize=4096, f_blocks=0, f_bfree=0,
f_bavail=0, f_files=0, f_ffree=0, f_fsid={0, 0}, f_namelen=255, f_frsize=4096}) = 0
As you can see, /dev/pts/$PTS has f_bavail=0 ;-)
Here's enough to keep auditd -f working during testing. Maybe you've
got a better idea.
thanks,
-chris
--
--- audit-0.6.4-orig/src/auditd-event.c 2005-02-23 14:37:59.000000000 -0800
+++ audit-0.6.4/src/auditd-event.c 2005-02-25 17:53:10.000000000 -0800
@@ -297,6 +297,9 @@ static void check_space_left(int lfd, st
int rc;
struct statfs buf;
+ if (isatty(lfd))
+ return;
+
rc = fstatfs(lfd, &buf);
if (rc == 0) {
if (buf.f_bavail < 5) {