On Wed, 24 May 2006 11:26:08 +1000, Leigh Purdie said: > Note the 228387 four from the top, and also after the 228390's. > > Is this something that should be considered a bug? If so (and it's > likely to be fixed in RHEL4 in the near future), then I'll be able to > greatly simplify the dispatcher code. :)
This smells a lot like a missing lock on an SMP or preemtable kernel. I'm not thrilled about having to grab a lock before the first call to audit_log_start and leaving it locked till the final audit_log_end for the event, since it could easily be 4 or 5 start/end pairs to get all of it out.
pgp8dAKmGPDtw.pgp
Description: PGP signature
-- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
