Re: [patch 058/209] audit: rework execve audit
On Fri, Jul 27, 2007 at 05:11:22PM -0400, Steve Grubb wrote:
On Friday 27 July 2007 17:03:59 Alexander Viro wrote:
> On Fri, Jul 27, 2007 at 04:13:10PM -0400, Steve Grubb wrote:
> > WARNING: at kernel/auditsc.c:859 audit_log_execve_info() (Not tainted)
> >
> > Call Trace:
> > [<ffffffff8106b06f>] audit_log_exit+0x5d7/0x964
> > [<ffffffff81050805>] trace_hardirqs_on+0x12e/0x151
> > [<ffffffff8106b60b>] audit_syscall_exit+0x9b/0x300
> > [<ffffffff8100ee62>] syscall_trace_leave+0x2c/0x87
> > [<ffffffff8100beb1>] int_very_careful+0x3a/0x43
>
> Umm... which architecture?
Its the x86_64 kernel on a Turion64 processor.
I think I understand what's going on. Test for execve failure in
there is bloody bogus.