From: <mat...@us...> - 2009-02-11 23:04:22
|
Revision: 2153 http://audit-test.svn.sourceforge.net/audit-test/?rev=2153&view=rev Author: mattanderson Date: 2009-02-11 23:04:20 +0000 (Wed, 11 Feb 2009) Log Message: ----------- Try again when a syscall test result doesn't show up in the audit log right away Modified Paths: -------------- trunk/tests/audit/syscalls/cap-run.conf trunk/tests/audit/syscalls/syscall_functions.bash Modified: trunk/tests/audit/syscalls/cap-run.conf =================================================================== --- trunk/tests/audit/syscalls/cap-run.conf 2009-02-04 22:04:54 UTC (rev 2152) +++ trunk/tests/audit/syscalls/cap-run.conf 2009-02-11 23:04:20 UTC (rev 2153) @@ -1,4 +1,4 @@ -#!/bin/bash +#!/bin/bash -x # ============================================================================= # (c) Copyright Hewlett-Packard Development Company, L.P., 2007 # Modified: trunk/tests/audit/syscalls/syscall_functions.bash =================================================================== --- trunk/tests/audit/syscalls/syscall_functions.bash 2009-02-04 22:04:54 UTC (rev 2152) +++ trunk/tests/audit/syscalls/syscall_functions.bash 2009-02-11 23:04:20 UTC (rev 2153) @@ -184,6 +184,17 @@ uid=$uid euid=$euid suid=$suid fsuid=$fsuid \ gid=$gid egid=$egid sgid=$sgid fsgid=$fsgid exit=$exitval \ "$@" + + if [ $? != 0 ]; then + echo "lets give it a few seconds and try again" + sleep 3; + augrok --seek=$log_mark -m1 type==SYSCALL \ + syscall=$syscall success=$success pid=$pid \ + auid=$(</proc/self/loginuid) \ + uid=$uid euid=$euid suid=$suid fsuid=$fsuid \ + gid=$gid egid=$egid sgid=$sgid fsgid=$fsgid exit=$exitval \ + "$@" + fi } function augrok_name { This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |