On Tuesday, December 02, 2014 04:27:24 PM Richard Guy Briggs wrote: > On 14/12/02, Paul Moore wrote: > > On Monday, December 01, 2014 03:58:09 PM Tony Jones wrote: > > > Mainline kernel reports ppc64le (per > > > a0588015deab1844261b27a67ae6f5b910fe2830) but there is no matching > > > AUDIT_ARCH_PPC64LE. Eric just pinged me on irc about it. Fix to add > > > it > > > to include/uapi/linux/audit.h shoudld probably go upstream. > > > > Untested, uncompiled too, but beyond the patch below, is there anything > > else we would need in the kernel to enable proper ppc64le support? > > Which kernel are you using? syscall_get_arch() already exists on > powerpc. audit_syscall_entry() lost its first argument recently...
That patch was on top of the linux-audit tree, it's based on v3.16 so I imagine there have been some changes upstream over the past few months. > What if it is in compatibility mode? /me shrugs ... that's why I posted it asking for feedback ;) I just wanted to get the ball rolling on a fix. -- paul moore www.paul-moore.com -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
