Re: [RFC][PATCH] (#5, U3) filesystem auditing
On Wednesday 09 March 2005 02:01 pm, Timothy R. Chavez wrote:
Just a quick note. Loulwa received a kernel panic this morning when
rebooting with patch #5 U3. I was unable to look at the panic message (it
was related to the VFS) she got earlier and I've not received such a panic
on my machine with the patch applied. If you do happen to patch with #5 U3
can you tell me what architecture you patched on and booted with and if you
got a panic (and any other information you could gather associated with the
panic) or not. It's my intention to test this code on as many platforms as
possible, but I'm really short on time at the moment. Thanks.
-tim
So I experienced the problem. One problem was passing victim (dentry), rather
then victim->d_inode (oops). But also, I think there might be another, more
fundamental flaw in that I'm operating on a inode->i_audit reference that
could be pulled out from under us in some places. I'm currently looking into
this (if it is possible) in some notable places. I'll post another patch
tonight with at least the obvious fix. Sorry about that.
-tim