1. 04 Oct, 2006 4 commits
    • Steve Grubb's avatar
      [PATCH] name_count array overrun · ac9910ce
      Steve Grubb authored
      Hi,
      
      This patch removes the rdev logging from the previous patch
      
      The below patch closes an unbounded use of name_count. This can lead to oopses
      in some new file systems.
      Signed-off-by: default avatarSteve Grubb <sgrubb@redhat.com>
      Signed-off-by: default avatarAl Viro <viro@zeniv.linux.org.uk>
      ac9910ce
    • Alexander Viro's avatar
      [PATCH] PPID filtering fix · 419c58f1
      Alexander Viro authored
      On Thu, Sep 28, 2006 at 04:03:06PM -0400, Eric Paris wrote:
      > After some looking I did not see a way to get into audit_log_exit
      > without having set the ppid.  So I am dropping the set from there and
      > only doing it at the beginning.
      >
      > Please comment/ack/nak as soon as possible.
      
      Ehh...  That's one hell of an overhead to be had ;-/  Let's be lazy.
      Signed-off-by: default avatarAl Viro <viro@zeniv.linux.org.uk>
      419c58f1
    • Eric Paris's avatar
      [PATCH] arch filter lists with < or > should not be accepted · 4b8a311b
      Eric Paris authored
      Currently the kernel audit system represents arch's as numbers and will
      gladly accept comparisons between archs using >, <, >=, <= when the only
      thing that makes sense is = or !=.  I'm told that the next revision of
      auditctl will do this checking but this will provide enforcement in the
      kernel even for old userspace.  A simple command to show the issue would
      be to run
      
      auditctl -d entry,always -F arch>i686 -S chmod
      
      with this patch the kernel will reject this with -EINVAL
      
      Please comment/ack/nak as soon as possible.
      
      -Eric
      
       kernel/auditfilter.c |    9 ++++++++-
       1 file changed, 8 insertions(+), 1 deletion(-)
      Signed-off-by: default avatarAl Viro <viro@zeniv.linux.org.uk>
      4b8a311b
    • Keith Mannthey's avatar
      [PATCH] i383 numa: fix numaq/summit apicid conflict · 78b656b8
      Keith Mannthey authored
      This allows numaq to properly align cpus to their given node during
      boot.  Pass logical apicid to apicid_to_node and allow the summit
      sub-arch to use physical apicid (hard_smp_processor_id()).
      
      Tested against numaq and summit based systems with no issues.
      Signed-off-by: default avatarKeith Mannthey <kmannth@us.ibm.com>
      Signed-off-by: default avatarLinus Torvalds <torvalds@osdl.org>
      78b656b8
  2. 03 Oct, 2006 36 commits