From: Russell Coker <russell@coker.com.au>
To: linux-kernel@vger.kernel.org
Cc: Jim Houston <jim.houston@ccur.com>
Subject: idr_remove
Date: Sat, 19 Feb 2005 23:32:52 +1100 [thread overview]
Message-ID: <200502192332.54815.russell@coker.com.au> (raw)
[-- Attachment #1: Type: text/plain, Size: 677 bytes --]
http://marc.theaimsgroup.com/?l=linux-kernel&m=109838483518162&w=2
I am getting messages "idr_remove called for id=0 which is not allocated" when
SE Linux denies search access to /dev/pts.
The attached file has some klogd output showing the situation, triggered in
this case by installing a new kernel package on a SE Debian system. The
above URL references Jim Houston's message with the patch to add this
warning.
--
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page
[-- Attachment #2: log --]
[-- Type: text/plain, Size: 6489 bytes --]
Jan 17 13:45:43 lyta kernel: audit(1105929943.164:0): avc: denied { search } for pid=30322 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:43 lyta kernel: idr_remove called for id=0 which is not allocated.
Jan 17 13:45:43 lyta kernel: [dump_stack+23/32] dump_stack+0x17/0x20
Jan 17 13:45:43 lyta kernel: [sub_remove+233/240] sub_remove+0xe9/0xf0
Jan 17 13:45:43 lyta kernel: [idr_remove+35/144] idr_remove+0x23/0x90
Jan 17 13:45:43 lyta kernel: [release_dev+1636/1968] release_dev+0x664/0x7b0
Jan 17 13:45:43 lyta kernel: [tty_open+254/656] tty_open+0xfe/0x290
Jan 17 13:45:43 lyta kernel: [chrdev_open+258/496] chrdev_open+0x102/0x1f0
Jan 17 13:45:43 lyta kernel: [dentry_open+342/576] dentry_open+0x156/0x240
Jan 17 13:45:43 lyta kernel: [filp_open+77/80] filp_open+0x4d/0x50
Jan 17 13:45:43 lyta kernel: [sys_open+60/160] sys_open+0x3c/0xa0
Jan 17 13:45:43 lyta kernel: [sysenter_past_esp+82/117] sysenter_past_esp+0x52/0x75
Jan 17 13:45:43 lyta kernel: audit(1105929943.347:0): avc: denied { search } for pid=30322 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:43 lyta kernel: audit(1105929943.425:0): avc: denied { search } for pid=30328 exe=/usr/bin/stat name=run dev=dm-2 ino=597921 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:var_run_t tclass=dir
Jan 17 13:45:43 lyta kernel: audit(1105929943.486:0): avc: denied { search } for pid=30328 exe=/usr/bin/stat name=run dev=dm-2 ino=597921 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:var_run_t tclass=dir
Jan 17 13:45:43 lyta kernel: audit(1105929943.563:0): avc: denied { search } for pid=30333 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:43 lyta kernel: idr_remove called for id=0 which is not allocated.
Jan 17 13:45:43 lyta kernel: [dump_stack+23/32] dump_stack+0x17/0x20
Jan 17 13:45:43 lyta kernel: [sub_remove+233/240] sub_remove+0xe9/0xf0
Jan 17 13:45:43 lyta kernel: [idr_remove+35/144] idr_remove+0x23/0x90
Jan 17 13:45:43 lyta kernel: [release_dev+1636/1968] release_dev+0x664/0x7b0
Jan 17 13:45:43 lyta kernel: [tty_open+254/656] tty_open+0xfe/0x290
Jan 17 13:45:43 lyta kernel: [chrdev_open+258/496] chrdev_open+0x102/0x1f0
Jan 17 13:45:43 lyta kernel: [dentry_open+342/576] dentry_open+0x156/0x240
Jan 17 13:45:43 lyta kernel: [filp_open+77/80] filp_open+0x4d/0x50
Jan 17 13:45:43 lyta kernel: [sys_open+60/160] sys_open+0x3c/0xa0
Jan 17 13:45:43 lyta kernel: [sysenter_past_esp+82/117] sysenter_past_esp+0x52/0x75
Jan 17 13:45:43 lyta kernel: audit(1105929943.713:0): avc: denied { search } for pid=30333 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:43 lyta kernel: audit(1105929943.785:0): avc: denied { search } for pid=30337 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:43 lyta kernel: idr_remove called for id=0 which is not allocated.
Jan 17 13:45:43 lyta kernel: [dump_stack+23/32] dump_stack+0x17/0x20
Jan 17 13:45:43 lyta kernel: [sub_remove+233/240] sub_remove+0xe9/0xf0
Jan 17 13:45:43 lyta kernel: [idr_remove+35/144] idr_remove+0x23/0x90
Jan 17 13:45:43 lyta kernel: [release_dev+1636/1968] release_dev+0x664/0x7b0
Jan 17 13:45:43 lyta kernel: [tty_open+254/656] tty_open+0xfe/0x290
Jan 17 13:45:43 lyta kernel: [chrdev_open+258/496] chrdev_open+0x102/0x1f0
Jan 17 13:45:43 lyta kernel: [dentry_open+342/576] dentry_open+0x156/0x240
Jan 17 13:45:43 lyta kernel: [filp_open+77/80] filp_open+0x4d/0x50
Jan 17 13:45:43 lyta kernel: [sys_open+60/160] sys_open+0x3c/0xa0
Jan 17 13:45:43 lyta kernel: [sysenter_past_esp+82/117] sysenter_past_esp+0x52/0x75
Jan 17 13:45:43 lyta kernel: audit(1105929943.902:0): avc: denied { search } for pid=30337 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:44 lyta kernel: audit(1105929943.967:0): avc: denied { search } for pid=30341 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:44 lyta kernel: idr_remove called for id=0 which is not allocated.
Jan 17 13:45:44 lyta kernel: [dump_stack+23/32] dump_stack+0x17/0x20
Jan 17 13:45:44 lyta kernel: [sub_remove+233/240] sub_remove+0xe9/0xf0
Jan 17 13:45:44 lyta kernel: [idr_remove+35/144] idr_remove+0x23/0x90
Jan 17 13:45:44 lyta kernel: [release_dev+1636/1968] release_dev+0x664/0x7b0
Jan 17 13:45:44 lyta kernel: [tty_open+254/656] tty_open+0xfe/0x290
Jan 17 13:45:44 lyta kernel: [chrdev_open+258/496] chrdev_open+0x102/0x1f0
Jan 17 13:45:44 lyta kernel: [dentry_open+342/576] dentry_open+0x156/0x240
Jan 17 13:45:44 lyta kernel: [filp_open+77/80] filp_open+0x4d/0x50
Jan 17 13:45:44 lyta kernel: [sys_open+60/160] sys_open+0x3c/0xa0
Jan 17 13:45:44 lyta kernel: [sysenter_past_esp+82/117] sysenter_past_esp+0x52/0x75
Jan 17 13:45:44 lyta kernel: audit(1105929944.072:0): avc: denied { search } for pid=30341 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:44 lyta kernel: audit(1105929944.150:0): avc: denied { search } for pid=30345 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:44 lyta kernel: idr_remove called for id=0 which is not allocated.
Jan 17 13:45:44 lyta kernel: [dump_stack+23/32] dump_stack+0x17/0x20
Jan 17 13:45:44 lyta kernel: [sub_remove+233/240] sub_remove+0xe9/0xf0
Jan 17 13:45:44 lyta kernel: [idr_remove+35/144] idr_remove+0x23/0x90
Jan 17 13:45:44 lyta kernel: [release_dev+1636/1968] release_dev+0x664/0x7b0
Jan 17 13:45:44 lyta kernel: [tty_open+254/656] tty_open+0xfe/0x290
Jan 17 13:45:44 lyta kernel: [chrdev_open+258/496] chrdev_open+0x102/0x1f0
Jan 17 13:45:44 lyta kernel: [dentry_open+342/576] dentry_open+0x156/0x240
Jan 17 13:45:44 lyta kernel: [filp_open+77/80] filp_open+0x4d/0x50
Jan 17 13:45:44 lyta kernel: [sys_open+60/160] sys_open+0x3c/0xa0
Jan 17 13:45:44 lyta kernel: [sysenter_past_esp+82/117] sysenter_past_esp+0x52/0x75
next reply other threads:[~2005-02-19 12:33 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-02-19 12:32 Russell Coker [this message]
2005-02-22 17:35 ` idr_remove Lorenzo Hernández García-Hierro
2005-02-22 18:22 ` idr_remove Jim Houston
2005-02-22 18:32 ` idr_remove Stephen Smalley
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200502192332.54815.russell@coker.com.au \
--to=russell@coker.com.au \
--cc=jim.houston@ccur.com \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®