05-25-2007
Information about kernel modules
Hi all,
what do kernel modules libaudit, klog and strlog do?
Specifically I want to determine if it was possible for us to determine if kernel level auditing is enabled at all?
regards
9 More Discussions You Might Find Interesting
1. SuSE
I'm using SuSE 9.2 Pro and trying to use a program call BestCrypt. I get it installed and type bctool and it says "Kernel modules not loaded". If you need to know anymore about it you can find it at http://www.jetico.com/linux/bcrypt-help/index.htm
linux:/home/chris/Desktop/Xtheater-0.9.2 #... (6 Replies)
Discussion started by: CTroxtell21
6 Replies
2. Programming
Hi,all:
I run my program which consists of one kernel module and one user mode process on a dual core server. The problem here is the kernel module consumes 100% of one core while the user mode process only consumes 10% of the other core, is there any solution that I can assign some computing... (1 Reply)
Discussion started by: neyshule
1 Replies
3. UNIX for Advanced & Expert Users
I installed in VM the Mandriva Linux with 2.6.27 kernel.
But presently when I fire make the modules .ko does not get built.
I get the following output on firing command in the kernel module folder.
$ make
Building first_driver.c ... make: Entering directory... (1 Reply)
Discussion started by: rupeshkp728
1 Replies
4. Programming
I am aware of debugging linux applications using gdb and ddd.
Now I have written a simple kernel module having init_module, exit _module and some functions for tasklets and workqueues.
I want to debug these kernel modules like I used to debug applications setting breakpoints etc.
How can I debug... (1 Reply)
Discussion started by: rupeshkp728
1 Replies
5. Emergency UNIX and Linux Support
Hi,
I need to set qlogic qla2xxx parameters in /etc/modprobe.conf
(Oracle Linux Server release 5.7, almost equal to RedHat 5.7)
two questions:
how can I pass this parameters to the module while it is loaded (fibre channel luns are in use), if possible at all
and how can I check the... (3 Replies)
Discussion started by: funksen
3 Replies
6. UNIX for Dummies Questions & Answers
This query is regarding the makefiles of linux kernel modules.
I saw at some sites on net it is suggesting to include the following path:
KERNEL_SOURCE := /usr/src/linux...
while at some places it is askibg to include /lib/modules path:
KERNEL_SOURCE := /lib/modules/2.6.27-7-generic/build... (0 Replies)
Discussion started by: rupeshkp728
0 Replies
7. Hardware
Hey everyone. I have a question, doing an lsmod gives me a list of all the loaded modules for my system. But how did they know to load? my /etc/modules files is empty, so how did these modules know to load themselves on boot time? If I were to take this hard drive to another computer with a... (6 Replies)
Discussion started by: Lost in Cyberia
6 Replies
8. Linux
Hi,
I am running CentOS 6.5 and I want to remove auto loading 8021q and garp modules, but there are no configure files in /etc/modprobe.d define bot modules.
I even added both module names to /etc/modprobe.d/blacklist.conf, both of them are still loaded after the reboot. How can I disable... (2 Replies)
Discussion started by: hce
2 Replies
9. UNIX for Beginners Questions & Answers
I'm a little embarrassed after all these years I've never really successfully compiled my own kernel. I used this guide to make the following files:
linux-headers-5.1.9_5.1.9-1_amd64.deb
linux-image-5.1.9_5.1.9-1_amd64.deb
linux-libc-dev_5.1.9-1_amd64.deb
When I first booted into this... (4 Replies)
Discussion started by: Azrael
4 Replies
LEARN ABOUT CENTOS
get_auditfail_action
GET_AUDITFAIL_ACTION(3) Linux Programmer's Manual GET_AUDITFAIL_ACTION(3)
NAME
get_auditfail_action - Get failure_action tunable value
SYNOPSIS
#include <libaudit.h>
int get_auditfail_action (int *failmode);
DESCRIPTION
This function gets the failure_action tunable value stored in /etc/libaudit.conf. get_auditfail_action should be called after an audit_open
call returns an error to see what action the admin prefers.
The failure_action value found in /etc/libaudit.conf is copied into the failmode argument upon function return. This value should then be
used by the calling application to determine what action should be taken when the audit subsystem is unavailable.
RETURN VALUE
Upon success, get_auditfail_action returns a zero, and the failmode argument will hold the failure_action value. The possible values for
failure_action are: FAIL_IGNORE (0), FAIL_LOG (1), and FAIL_TERMINATE (2). Upon failure, get_auditfail_action returns a return code of one.
ERRORS
An error is returned if there is an error reading /etc/libaudit.conf or if the failure_action tunable is not found in the file.
EXAMPLES
/* Sample code */
auditfail_t failmode;
if ((fd = audit_open() ) < 0 ) {
fprintf (stderr, "Cannot open netlink audit socket");
/* Get the failure_action */
if ((rc = get_auditfail_action(&failmode)) == 0) {
if (failmode == FAIL_LOG)
fprintf (stderr, "Audit subsystem unavailable");
else if (failmode == FAIL_TERMINATE)
exit (1);
/* If failmode == FAIL_IGNORE, do nothing */
}
}
SEE ALSO
audit_open(3), auditd(8).
AUTHOR
Lisa M. Smith.
Linux 2.7 2006-7-10 GET_AUDITFAIL_ACTION(3)