Date: Mon, 20 Apr 2009 00:29:19 +0100 (BST) From: Robert Watson <rwatson@FreeBSD.org> To: Jakub Lach <jakub_lach@mailplus.pl> Cc: freebsd-current@freebsd.org Subject: Re: OpenBSM 1.1 imported (was: svn commit: r191273 - in head: contrib/openbsm contrib/openbsm/bin contrib/openbsm/bin/audit contrib/openbsm/bin/auditd contrib/openbsm/bin/auditfilterd contrib/openbsm/bin/auditreduce contrib/open... (fwd)) Message-ID: <alpine.BSF.2.00.0904200028100.71062@fledge.watson.org> In-Reply-To: <alpine.BSF.2.00.0904200004180.71062@fledge.watson.org> References: <alpine.BSF.2.00.0904191728370.21859@fledge.watson.org> <23127561.post@talk.nabble.com> <alpine.BSF.2.00.0904192343350.71062@fledge.watson.org> <23128287.post@talk.nabble.com> <alpine.BSF.2.00.0904200004180.71062@fledge.watson.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 20 Apr 2009, Robert Watson wrote: > On Sun, 19 Apr 2009, Jakub Lach wrote: > >> 1) It's not GENERIC, but I've double checked - AUDIT is enabled. >> 2) Local login. >> 3) Userspace and kernel version is synced. Logging with old kernel is not >> possible. >> >> Upgrading procedure- buildworld, buildkernel, installkernel, installworld, >> mergemaster, reboot. > > Any chance you're using amd64 with a 64-bit userspace? OK, it looks like login_audit.c in login(1) isn't quite ready for the new restrictions on argument types to A_GETCOND that came in with the new OpenBSM code. What I've done temporarily (r191296) is relax those constraints so that both the old and new versions of the auditon(2) commands will work with longs. This will hopefully fix the problem you're seeing with login(1), presumably on amd64? Robert N M Watson Computer Laboratory University of Cambridge > > Robert N M Watson > Computer Laboratory > University of Cambridge > >> >> Thanks for reply. >> >> >> Robert Watson wrote: >>> >>> >>> On Sun, 19 Apr 2009, Jakub Lach wrote: >>> >>>> After updating to revision 191274, I cannot login. >>>> >>>> "could not determine audit condition" >>>> >>>> Sorry for bothering you, but I don't know how to deal with it. >>> >>> Could you let me know: >>> >>> (1) Do you have options AUDIT compiled into your kernel? It's in GENERIC >>> by >>> default, and it occurs to me I've not tested the !AUDIT case lately. >>> >>> (2) How are you logging in -- using the console, or sshd, or...? Does it >>> work >>> better or worse if you try another way of logging in? >>> >>> (3) ... and could you confirm that your kernel was rebuilt and installed >>> prior >>> to updating userspace? If you switch to an old kernel, are you then >>> able >>> to log in? >>> >>> Robert N M Watson >>> Computer Laboratory >>> University of Cambridge >>> _______________________________________________ >>> freebsd-current@freebsd.org mailing list >>> http://lists.freebsd.org/mailman/listinfo/freebsd-current >>> To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org" >>> >>> >> >> -- >> View this message in context: >> http://www.nabble.com/OpenBSM-1.1-imported-%28was%3A-svn-commit%3A-r191273---in-head%3A-contrib-openbsm-contrib-openbsm-bin-contrib-openbsm-bin-audit-contrib-openbsm-bin-auditd-contrib-openbsm-bin-auditfilterd-contrib-openbsm-bin-auditreduce-contrib-open...-%28fwd%29%29-tp23124717p23128287.html >> Sent from the freebsd-current mailing list archive at Nabble.com. >> >> _______________________________________________ >> freebsd-current@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-current >> To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org" >> > _______________________________________________ > freebsd-current@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.00.0904200028100.71062>