On 03/07/26 4:19 am, Ricardo Robaina wrote:
On Thu, Jul 2, 2026 at 3:19 PM Ricardo Robaina <[email protected]> wrote:
On Thu, Jul 2, 2026 at 10:28 AM Paul Moore <[email protected]> wrote:
On Thu, Jul 2, 2026 at 8:50 AM Venkat Rao Bagalkote
<[email protected]> wrote:
Current remaining issue:
1. amcast_joinpart
------------------
Still fails due to a missing Perl dependency:
Can't locate Socket/Netlink.pm in @INC
I searched the configured repositories and could not find a package
providing Socket::Netlink / Socket/Netlink.pm on this EL10 ppc64le system.
Latest run summary:
amcast_joinpart/test ................. Can't locate Socket/Netlink.pm in
@INC (you may need to install the Socket::Netlink module) (@INC entries
checked: /usr/local/lib64/perl5/5.40 /usr/local/share/perl5/5.40
/usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
/usr/lib64/perl5 /usr/share/perl5 .) at amcast_joinpart/test line 10.
BEGIN failed--compilation aborted at amcast_joinpart/test line 10.
amcast_joinpart/test ................. Dubious, test returned 2 (wstat
512, 0x200)
Failed 7/7 subtests
backlog_wait_time_actual_reset/test .. ok
bpf/test ............................. ok
exec_execve/test ..................... ok
exec_name/test ....................... ok
fanotify/test ........................ ok
field_compare/test ................... ok
file_create/test ..................... ok
file_delete/test ..................... ok
file_permission/test ................. ok
file_rename/test ..................... ok
filter_exclude/test .................. ok
filter_exit/test ..................... ok
filter_saddr_fam/test ................ ok
filter_sessionid/test ................ ok
io_uring/test ........................ ok
login_tty/test ....................... ok
lost_reset/test ...................... ok
netfilter_pkt/test ................... ok
signal/test .......................... ok
syscalls_file/test ................... ok
syscall_module/test .................. ok
time_change/test ..................... ok
user_msg/test ........................ ok
All tests now pass except amcast_joinpart, which is blocked by the
missing Socket::Netlink Perl module.
Please let me know if there is a recommended package source for
Socket::Netlink on EL10 ppc64le.
Thanks for following up on this Venkat.
I'm adding your colleague Ricardo from the RH side of the house.
Ricardo is very familiar with audit and should be able to help you
with missing RHEL packages.
Thanks for looping me in, Paul!
Venkat, unfortunately, perl-Socket-Netlink is not packaged for RHEL-10
ppc64le. An alternative is to use CPAN[1] to install the
Socket::Netlink Perl module.
# dnf install cpan
# cpan App::cpanminus
# cpanm Socket::Netlink
I'll reserve a ppc64le machine and run the tests locally as well. I'll
share the results shortly.
[1] https://www.cpan.org/modules/INSTALL.html
Thanks for the RPM's Ricardo.
I installed the missing dependencies (netcat, iptables, ip6tables) and
rebuilt the kernel with arp_tables available as a module. I also
installed Socket::Netlink using:
cpanm --mirror https://cpan.metacpan.org --mirror-only Socket::Netlink
After these changes, I reran audit-testsuite and all tests are now passing:
Files=24, Tests=279
Result: PASS
amcast_joinpart/test ................. ok
backlog_wait_time_actual_reset/test .. ok
bpf/test ............................. ok
exec_execve/test ..................... ok
exec_name/test ....................... ok
fanotify/test ........................ ok
field_compare/test ................... ok
file_create/test ..................... ok
file_delete/test ..................... ok
file_permission/test ................. ok
file_rename/test ..................... ok
filter_exclude/test .................. ok
filter_exit/test ..................... ok
filter_saddr_fam/test ................ ok
filter_sessionid/test ................ ok
io_uring/test ........................ ok
login_tty/test ....................... ok
lost_reset/test ...................... ok
netfilter_pkt/test ................... ok
signal/test .......................... ok
syscalls_file/test ................... ok
syscall_module/test .................. ok
time_change/test ..................... ok
user_msg/test ........................ ok
Paul/Christophe/Maddy,
Hope we are good now. Please let me know, if anything else needs to be done.
Regards,
Venkat.
--
paul-moore.com
Hello everyone,
I built an RHEL-10 kernel with the patch applied and verified that
audit-testsuite passes successfully on a ppc64le machine. Please find
the logs below:
Tested-by: Ricardo Robaina <[email protected]>
---
# uname -m
ppc64le
# uname -r
6.12.0-245.test.el10.ppc64le
# make test
...
chmod +x */test
Running as user root
with context unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
on system RHEL10
amcast_joinpart/test ................. ok
backlog_wait_time_actual_reset/test .. ok
bpf/test ............................. ok
coredump/test ........................ ok
exec_execve/test ..................... ok
exec_name/test ....................... ok
fanotify/test ........................ ok
field_compare/test ................... ok
file_create/test ..................... ok
file_delete/test ..................... ok
file_permission/test ................. ok
file_rename/test ..................... ok
filter_device/test ................... ok
filter_exclude/test .................. ok
filter_exit/test ..................... ok
filter_inode/test .................... ok
filter_saddr_fam/test ................ ok
filter_sessionid/test ................ ok
io_uring/test ........................ ok
login_tty/test ....................... ok
lost_reset/test ...................... ok
netfilter_pkt/test ................... ok
signal/test .......................... ok
syscalls_file/test ................... ok
syscall_module/test .................. ok
time_change/test ..................... ok
user_msg/test ........................ ok
All tests successful.
Files=27, Tests=300, 252 wallclock secs ( 0.12 usr 0.01 sys + 54.34
cusr 1.38 csys = 55.85 CPU)
Result: PASS
make[1]: Leaving directory '/root/rrobaina/audit-testsuite/tests'
---
I hope it helps!
-Ricardo
