[Bug 229381] reads to /dev/audit aren't interruptible

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Thu Jun 28 06:01:34 UTC 2018


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229381

Alan Somers <asomers at FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|bugs at FreeBSD.org            |asomers at FreeBSD.org
             Status|New                         |In Progress
          Component|kern                        |bin

--- Comment #2 from Alan Somers <asomers at FreeBSD.org> ---
I figured it out.  The signal handler code is helpfully restarting the syscall
for me.  read(2) is actually returning to userland, but not to the stack from
whence I called it.  I need to use sigaction without SA_RESTART or siginterrupt
to fix it.  As is, auditd is using plain signal(), which automatically includes
SA_RESTART.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list