Your message dated Mon, 13 Feb 2012 10:22:09 +0100
with message-id <[email protected]>
and subject line Re: gawk: awk calls ioctl(TCGETS) on regular files
has caused the Debian Bug report #387353,
regarding gawk: awk calls ioctl(TCGETS) on regular files
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
387353: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=387353
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: gawk
Version: 1:3.1.5.dfsg-4
Severity: normal

awk calls TCGETS (tcgetattr) on regular files, which causes all kind of
extra audit errors. For example:
avc:  denied  { ioctl } for  pid=2173 comm="awk" name="master.cf"
dev=hda1 ino=33064 scontext=system_u:system_r:initrc_t
tcontext=system_u:object_r:postfix_etc_t tclass=file

triggered by the postfix init script.
This is completely unnecessary; and I'd prefer awk not doing the ioctl,
instead of adding (potentially dozens of) "dontaudit" rules to the
SELinux policy... Maybe you could stat() first to see if the file
actually is a device node?

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/dash
Kernel: Linux 2.6.17.7
Locale: LANG=de_DE.UTF-8@euro, LC_CTYPE=de_DE.UTF-8@euro (charmap=UTF-8)

Versions of packages gawk depends on:
ii  libc6                        2.3.6.ds1-4 GNU C Library: Shared libraries

gawk recommends no packages.

-- no debconf information


--- End Message ---
--- Begin Message ---
Hi,

As explained in #387329 the problem lies with libc. Furthermore I
cannot reproduce this problem on a squeeze installation. Therefore I
am closing this bug.

Regards,
-- 
Jeroen Schot


--- End Message ---

Reply via email to