I built Saucy's audit package for Precise and ran it under the -lts-
saucy kernel. When running the auditctl command in the bug description,
it emitted the following warning:
Warning - entry rules deprecated, changing to exit rule
Starting with kernel version 3.3, the audit kernel code refuses
entry,always rules. Starting with audit version 2.0, auditctl converts
entry,always rules to exit,always rules.
The fix seems to be to backport upstream audit commits 300, 301, and 307
to Precise's audit package to make auditctl convert entry,always rules
to exit,always.
** Changed in: audit (Ubuntu)
Importance: Undecided => Medium
** Changed in: audit (Ubuntu)
Status: Confirmed => Triaged
** Changed in: audit (Ubuntu)
Assignee: (unassigned) => Tyler Hicks (tyhicks)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1158500
Title:
auditd fails to add rules when used in precise with -lts-quantal
kernel
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/audit/+bug/1158500/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
