* auditctl exit code
@ 2012-05-11 12:20 Stephen Quinney
2012-05-11 14:34 ` Steve Grubb
0 siblings, 1 reply; 4+ messages in thread
From: Stephen Quinney @ 2012-05-11 12:20 UTC (permalink / raw)
To: linux-audit
I am using Linux Audit version 2.1.3 and I'm wondering if the
following behaviour of auditctl is intentional. When I do a complete
list of the current rules (with auditctl -l) I get an exit code of
zero, as expected. When I do a list which is restricted to a
particular key (auditctl -l -k foo) I get 255. It doesn't matter which
of my keys I use and there are no error messages sent to stderr to
indicate a problem. The auditctl manpage doesn't say what various exit
values mean so I'm not sure what type of error is occurring.
Stephen Quinney
--
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: auditctl exit code
2012-05-11 12:20 auditctl exit code Stephen Quinney
@ 2012-05-11 14:34 ` Steve Grubb
2012-05-15 0:03 ` Steve Grubb
0 siblings, 1 reply; 4+ messages in thread
From: Steve Grubb @ 2012-05-11 14:34 UTC (permalink / raw)
To: linux-audit
On Friday, May 11, 2012 08:20:06 AM Stephen Quinney wrote:
> I am using Linux Audit version 2.1.3 and I'm wondering if the
> following behaviour of auditctl is intentional.
No. I think its a bug in the code.
-Steve
> When I do a complete
> list of the current rules (with auditctl -l) I get an exit code of
> zero, as expected. When I do a list which is restricted to a
> particular key (auditctl -l -k foo) I get 255. It doesn't matter which
> of my keys I use and there are no error messages sent to stderr to
> indicate a problem. The auditctl manpage doesn't say what various exit
> values mean so I'm not sure what type of error is occurring.
>
>
> Stephen Quinney
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: auditctl exit code
2012-05-11 14:34 ` Steve Grubb
@ 2012-05-15 0:03 ` Steve Grubb
2012-05-15 8:31 ` Stephen Quinney
0 siblings, 1 reply; 4+ messages in thread
From: Steve Grubb @ 2012-05-15 0:03 UTC (permalink / raw)
To: linux-audit
On Friday, May 11, 2012 10:34:52 AM Steve Grubb wrote:
> On Friday, May 11, 2012 08:20:06 AM Stephen Quinney wrote:
> > I am using Linux Audit version 2.1.3 and I'm wondering if the
> > following behaviour of auditctl is intentional.
>
> No. I think its a bug in the code.
This should fix it:
https://fedorahosted.org/audit/changeset/694
-Steve
> > When I do a complete
> > list of the current rules (with auditctl -l) I get an exit code of
> > zero, as expected. When I do a list which is restricted to a
> > particular key (auditctl -l -k foo) I get 255. It doesn't matter which
> > of my keys I use and there are no error messages sent to stderr to
> > indicate a problem. The auditctl manpage doesn't say what various exit
> > values mean so I'm not sure what type of error is occurring.
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: auditctl exit code
2012-05-15 0:03 ` Steve Grubb
@ 2012-05-15 8:31 ` Stephen Quinney
0 siblings, 0 replies; 4+ messages in thread
From: Stephen Quinney @ 2012-05-15 8:31 UTC (permalink / raw)
To: Steve Grubb; +Cc: linux-audit
On Mon, May 14, 2012 at 08:03:27PM -0400, Steve Grubb wrote:
> On Friday, May 11, 2012 10:34:52 AM Steve Grubb wrote:
> > On Friday, May 11, 2012 08:20:06 AM Stephen Quinney wrote:
> > > I am using Linux Audit version 2.1.3 and I'm wondering if the
> > > following behaviour of auditctl is intentional.
> > >
> > > When I do a complete
> > > list of the current rules (with auditctl -l) I get an exit code of
> > > zero, as expected. When I do a list which is restricted to a
> > > particular key (auditctl -l -k foo) I get 255. It doesn't matter which
> > > of my keys I use and there are no error messages sent to stderr to
> > > indicate a problem. The auditctl manpage doesn't say what various exit
> > > values mean so I'm not sure what type of error is occurring.
> >
> > No. I think its a bug in the code.
>
> This should fix it:
> https://fedorahosted.org/audit/changeset/694
>
Thanks for the patch. I've just rebuilt the code with the patch
applied and it now works correctly.
Cheers,
Stephen
--
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2012-05-15 8:31 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2012-05-11 12:20 auditctl exit code Stephen Quinney
2012-05-11 14:34 ` Steve Grubb
2012-05-15 0:03 ` Steve Grubb
2012-05-15 8:31 ` Stephen Quinney
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.