|
 |
fa2dd6 |
From 7774511d5438e5bbfc0d0142b7656da0498e7126 Mon Sep 17 00:00:00 2001
|
|
|
fa2dd6 |
From: =?UTF-8?q?Jan=20=C4=8Cern=C3=BD?= <jcerny@redhat.com>
|
|
|
fa2dd6 |
Date: Wed, 29 May 2019 14:54:02 +0200
|
|
|
fa2dd6 |
Subject: [PATCH] Do not skip 'fs.binfmt_misc.status' by sysctl probe
|
|
|
fa2dd6 |
|
|
|
fa2dd6 |
Directory /proc/sys/fs/binfmt_misc is a separate file system,
|
|
|
fa2dd6 |
mounted by systemd-automout and is represented by an autofs
|
|
|
fa2dd6 |
entry in /etc/mtab. /proc/sys/fs/binfmt_misc is mounted
|
|
|
fa2dd6 |
on demand when accessed. If accessed the first time, we don't
|
|
|
fa2dd6 |
have a way to determine the if the autofs is remote or local.
|
|
|
fa2dd6 |
See 309f8230d67f229b6091876c3ace62370fb3d451.
|
|
|
fa2dd6 |
However, we don't see a reason why not to traverse the whole
|
|
|
fa2dd6 |
/proc/sys regardless the type of file systems mounted there.
|
|
|
fa2dd6 |
---
|
|
|
fa2dd6 |
src/OVAL/probes/unix/sysctl.c | 2 +-
|
|
|
fa2dd6 |
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
fa2dd6 |
|
|
|
fa2dd6 |
diff --git a/src/OVAL/probes/unix/sysctl.c b/src/OVAL/probes/unix/sysctl.c
|
|
|
fa2dd6 |
index 3001bfd76..bc53b43fc 100644
|
|
|
fa2dd6 |
--- a/src/OVAL/probes/unix/sysctl.c
|
|
|
fa2dd6 |
+++ b/src/OVAL/probes/unix/sysctl.c
|
|
|
fa2dd6 |
@@ -76,7 +76,7 @@ int probe_main(probe_ctx *ctx, void *probe_arg)
|
|
|
fa2dd6 |
*/
|
|
|
fa2dd6 |
ent_attrs = probe_attr_creat("max_depth", r0 = SEXP_string_newf("%d", PROC_SYS_MAXDEPTH),
|
|
|
fa2dd6 |
"recurse_direction", r1 = SEXP_string_new("down", 4),
|
|
|
fa2dd6 |
- "recurse_file_system", r2 = SEXP_string_new("local", 7),
|
|
|
fa2dd6 |
+ "recurse_file_system", r2 = SEXP_string_new("all", 3),
|
|
|
fa2dd6 |
"recurse", r3 = SEXP_string_new("symlinks and directories", 24),
|
|
|
fa2dd6 |
NULL);
|
|
|
fa2dd6 |
bh_entity = probe_ent_creat1("behaviors", ent_attrs, NULL);
|
|
|
fa2dd6 |
--
|
|
|
fa2dd6 |
2.20.1
|
|
|
fa2dd6 |
|