Browse code
kernels: linux-esx: Enable audit support
In a bosh stemcell, upon booting, the bosh agent tries to start the
auditd service. When using a Photon OS stemcell with the linux-esx
kernel, the auditd service fails to run because the support for audit
netlink sockets is disabled in the kernel. As a result, the bosh agent
gets confused and goes into an agent restart loop and causes the VM to
get stuck in an unmanageable state. So enable CONFIG_AUDIT in
linux-esx to fix this.
Change-Id: I3e4e5f0ede61ac792557eea448f9df12291f0980
Reviewed-on: http://photon-jenkins.eng.vmware.com:8082/4539
Tested-by: gerrit-photon <photon-checkins@vmware.com>
Reviewed-by: Alexey Makhalov <amakhalov@vmware.com>
Srivatsa S. Bhat authored on 2017/12/20 09:50:42Showing 2 changed files
| ... | ... |
@@ -1,6 +1,6 @@ |
| 1 | 1 |
# |
| 2 | 2 |
# Automatically generated file; DO NOT EDIT. |
| 3 |
-# Linux/x86 4.9.64 Kernel Configuration |
|
| 3 |
+# Linux/x86 4.9.66 Kernel Configuration |
|
| 4 | 4 |
# |
| 5 | 5 |
CONFIG_64BIT=y |
| 6 | 6 |
CONFIG_X86_64=y |
| ... | ... |
@@ -76,8 +76,11 @@ CONFIG_POSIX_MQUEUE_SYSCTL=y |
| 76 | 76 |
# CONFIG_CROSS_MEMORY_ATTACH is not set |
| 77 | 77 |
CONFIG_FHANDLE=y |
| 78 | 78 |
# CONFIG_USELIB is not set |
| 79 |
-# CONFIG_AUDIT is not set |
|
| 79 |
+CONFIG_AUDIT=y |
|
| 80 | 80 |
CONFIG_HAVE_ARCH_AUDITSYSCALL=y |
| 81 |
+CONFIG_AUDITSYSCALL=y |
|
| 82 |
+CONFIG_AUDIT_WATCH=y |
|
| 83 |
+CONFIG_AUDIT_TREE=y |
|
| 81 | 84 |
|
| 82 | 85 |
# |
| 83 | 86 |
# IRQ subsystem |
| ... | ... |
@@ -850,6 +853,7 @@ CONFIG_NETFILTER_XT_SET=m |
| 850 | 850 |
# |
| 851 | 851 |
# Xtables targets |
| 852 | 852 |
# |
| 853 |
+# CONFIG_NETFILTER_XT_TARGET_AUDIT is not set |
|
| 853 | 854 |
CONFIG_NETFILTER_XT_TARGET_CHECKSUM=m |
| 854 | 855 |
CONFIG_NETFILTER_XT_TARGET_CLASSIFY=m |
| 855 | 856 |
CONFIG_NETFILTER_XT_TARGET_CONNMARK=m |
| ... | ... |
@@ -2,7 +2,7 @@ |
| 2 | 2 |
Summary: Kernel |
| 3 | 3 |
Name: linux-esx |
| 4 | 4 |
Version: 4.9.66 |
| 5 |
-Release: 1%{?dist}
|
|
| 5 |
+Release: 2%{?dist}
|
|
| 6 | 6 |
License: GPLv2 |
| 7 | 7 |
URL: http://www.kernel.org/ |
| 8 | 8 |
Group: System Environment/Kernel |
| ... | ... |
@@ -198,6 +198,8 @@ ln -sf linux-%{uname_r}.cfg /boot/photon.cfg
|
| 198 | 198 |
/usr/src/linux-headers-%{uname_r}
|
| 199 | 199 |
|
| 200 | 200 |
%changelog |
| 201 |
+* Mon Dec 19 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.9.66-2 |
|
| 202 |
+- Enable audit support (CONFIG_AUDIT=y) |
|
| 201 | 203 |
* Mon Dec 04 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.9.66-1 |
| 202 | 204 |
- Version update |
| 203 | 205 |
* Tue Nov 21 2017 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 4.9.64-1 |