Re: v3.19-rc2: crashes during boot (syslog-ng, rpcbind ...)

[Paul Moore <paul@paul-moore.com>]

On Monday, December 29, 2014 05:24:38 PM Toralf Förster wrote:
> On 12/29/2014 05:21 PM, Paul Moore wrote:
> > On Mon, Dec 29, 2014 at 11:07 AM, Toralf Förster wrote:
> >> A x86 KVM guest running at a 64 bit Gentoo hardened host system the
> >> following crashes appeared reproducible (screen shots attached.
> >> 
> >> If I removed syslog-ng from the runlevel default, then the crash just
> >> appeared a little bit later at another subsystem> 
> >
> > It looks like it doesn't like something in audit_compare_dname_path();
> > I'll take a look and see what I can find, there is a patch in -rc2
> > which touched some related code.
> > 
> > I didn't see this problem in my earlier testing, can you share your
> > .config?
>
> ofc - attached

[NOTE: added linux-audit to the CC line, I should have done that earlier]

I believe I can reproduce this now; I'm seeing slightly different panics, but 
it is "close enough" and based on some quality time with the code I believe 
they are both symptoms of the same root cause.

To help verify that I'm heading down the right path, could you share your 
audit configuration as well?  If that's not possible, can you at least confirm 
that you using a few audit directory watches?

-- 
paul moore
www.paul-moore.com