Hi J. R. Okajima,

Just found a bug:
It got created due rc4 of kernel 3.0 series by this upstream commit:

devcgroup_inode_permission: take "is it a device node" checks to
inlined wrapper

http://lwn.net/Articles/448557/

I attached a working patch. Shoud go into aufs-2.1-standalone.patch
diff --git a/security/device_cgroup.c b/security/device_cgroup.c
index 682fa26..215278c 100644
--- a/security/device_cgroup.c
+++ b/security/device_cgroup.c
@@ -508,7 +508,7 @@ found:
 
 	return -EPERM;
 }
-EXPORT_SYMBOL_GPL(devcgroup_inode_permission);
+EXPORT_SYMBOL_GPL(__devcgroup_inode_permission);
 
 int devcgroup_inode_mknod(int mode, dev_t dev)
 {

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security 
threats, fraudulent activity, and more. Splunk takes this data and makes 
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2

Reply via email to