CaROS/meta-selinux
3
0
Fork 0
mirror of git://git.yoctoproject.org/meta-selinux synced 2026-01-01 13:58:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

audit: add clock_settime64 syscall

Browse Source 
On 32bit system,
After upgrade glibc to 2.31
 # strace -o /tmp/test.log date -s 09:16:45
 # tail -f /tmp/test.log
 close(3)                                = 0
 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=114, ...}) = 0
 clock_settime64(CLOCK_REALTIME, {tv_sec=1582103805, tv_nsec=0}) = 0
 fstat64(1, {st_mode=S_IFCHR|0600, st_rdev=makedev(0x4, 0x40), ...}) = 0
 ioctl(1, TCGETS, {B115200 opost isig icanon echo ...}) = 0
 write(1, "Wed Feb 19 09:16:45 UTC 2020\n", 29) = 29
 close(1)                                = 0
 close(2)                                = 0
 exit_group(0)                           = ?
 +++ exited with 0 +++

It means the clock_settime64 syscall is used, so
add the syscall.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
This commit is contained in:
Mingli Yu 2020-02-19 15:59:22 +08:00 committed by Joe MacDonald
parent dc8c5e90ec
commit 6257da999f
2 changed files with 43 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

42
recipes-security/audit/audit/0001-lib-i386_table.h-add-new-syscall.patch Normal file
View File

@ -0,0 +1,42 @@
From df878b92e01f4d1c3de7f7d8229cea6a431509eb Mon Sep 17 00:00:00 2001
From: Mingli Yu <mingli.yu@windriver.com>
Date: Wed, 19 Feb 2020 15:23:40 +0800
Subject: [PATCH] lib/i386_table.h: add new syscall
On 32bit system,
After upgrade glibc to 2.31
# strace -o /tmp/test.log date -s 09:16:45
# tail -f /tmp/test.log
close(3) = 0
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=114, ...}) = 0
clock_settime64(CLOCK_REALTIME, {tv_sec=1582103805, tv_nsec=0}) = 0
fstat64(1, {st_mode=S_IFCHR|0600, st_rdev=makedev(0x4, 0x40), ...}) = 0
ioctl(1, TCGETS, {B115200 opost isig icanon echo ...}) = 0
write(1, "Wed Feb 19 09:16:45 UTC 2020\n", 29) = 29
close(1) = 0
close(2) = 0
exit_group(0) = ?
+++ exited with 0 +++
It means the clock_settime64 syscall is used, so
add the syscall.
Upstream-Status: Submitted [https://github.com/linux-audit/audit-userspace/pull/116]
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
---
lib/i386_table.h | 1 +
1 file changed, 1 insertion(+)
diff --git a/lib/i386_table.h b/lib/i386_table.h
index 1a64c88..65fd4d9 100644
--- a/lib/i386_table.h
+++ b/lib/i386_table.h
@@ -405,3 +405,4 @@ _S(383, "statx")
_S(384, "arch_prctl")
_S(385, "io_pgetevents")
_S(386, "rseq")
+_S(404, "clock_settime64")
--
2.7.4

1
recipes-security/audit/audit_2.8.5.bb
View File

@ -10,6 +10,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=94d55d512a9ba36caa9b7df079bae19f"
SRC_URI = "git://github.com/linux-audit/${BPN}-userspace.git;branch=2.8_maintenance \
file://Add-substitue-functions-for-strndupa-rawmemchr.patch \
file://Fixed-swig-host-contamination-issue.patch \
file://0001-lib-i386_table.h-add-new-syscall.patch \
file://auditd \
file://auditd.service \
file://audit-volatile.conf \