On 2017-09-01 09:44, Paul Moore wrote:
From: Paul Moore <paul(a)paul-moore.com>
We can't initialize the audit subsystem until after the network layer
is initialized (core_initcall), but do it soon after.
I had run into a similar problem when trying to log the creation of
initial namespaces and had to move this around in V4 to V7 of the
namespace ID and namespace serial number patchsets:
2014-08-20 21:09 To linux-audit@redha ( 26) ├─>[PATCH V4 8/8] audit: initialize at
subsystem time rather than device time
https://www.redhat.com/archives/linux-audit/2014-August/msg00044.html
2014-10-06 01:08 To linux-audit@redha (3.0K) ├─>[PATCH V5 05/13] audit: initialize at
subsystem time rather than device time
https://www.redhat.com/archives/linux-audit/2014-October/msg00035.html
2015-04-17 03:35 To containers@lists. (3.0K) ├─>[PATCH V6 04/10] audit: initialize at
subsystem time rather than device time
https://www.redhat.com/archives/linux-audit/2015-April/msg00018.html
2015-05-12 16:02 To linux-audit@redha (3.0K) ├─>[PATCH V7 05/10] audit: initialize at
subsystem time rather than device time
https://www.redhat.com/archives/linux-audit/2015-May/msg00023.html
Signed-off-by: Paul Moore <paul(a)paul-moore.com>
Reviewed-by: Richard Guy Briggs <rgb(a)redhat.com>
---
kernel/audit.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/kernel/audit.c b/kernel/audit.c
index 33b00ec2157f..de8a9b8465ae 100644
--- a/kernel/audit.c
+++ b/kernel/audit.c
@@ -1561,7 +1561,7 @@ static int __init audit_init(void)
return 0;
}
-__initcall(audit_init);
+postcore_initcall(audit_init);
/* Process kernel command-line parameter at boot time. audit=0 or audit=1. */
static int __init audit_enable(char *str)
--
Linux-audit mailing list
Linux-audit(a)redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit
- RGB
--
Richard Guy Briggs <rgb(a)redhat.com>
Sr. S/W Engineer, Kernel Security, Base Operating Systems
Remote, Ottawa, Red Hat Canada
IRC: rgb, SunRaycer
Voice: +1.647.777.2635, Internal: (81) 32635