From owner-freebsd-stable@FreeBSD.ORG Tue Nov 14 17:02:50 2006 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2F7F016A403; Tue, 14 Nov 2006 17:02:50 +0000 (UTC) (envelope-from steve@stevenwills.com) Received: from stevenwills.com (cpe-024-163-080-004.nc.res.rr.com [24.163.80.4]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9F87F43D46; Tue, 14 Nov 2006 17:02:49 +0000 (GMT) (envelope-from steve@stevenwills.com) Received: from [10.0.0.58] ([208.44.167.67]) (authenticated bits=0) by stevenwills.com (8.13.1/8.13.1) with ESMTP id kAEH2feK008633 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Tue, 14 Nov 2006 12:02:43 -0500 (EST) (envelope-from steve@stevenwills.com) In-Reply-To: <20061114092953.R50450@fledge.watson.org> References: <9ABCABF7-2D44-496D-84A2-4C3CA4527355@stevenwills.com> <20061114092953.R50450@fledge.watson.org> Mime-Version: 1.0 (Apple Message framework v752.2) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Steve Wills Date: Tue, 14 Nov 2006 12:02:43 -0500 To: Robert Watson X-Mailer: Apple Mail (2.752.2) X-Greylist: Sender succeeded SMTP AUTH authentication, not delayed by milter-greylist-2.0.2 (stevenwills.com [24.163.80.4]); Tue, 14 Nov 2006 12:02:43 -0500 (EST) X-Spam-Status: No, score=0.0 required=5.0 tests=none autolearn=disabled version=3.1.3 X-Spam-Checker-Version: SpamAssassin 3.1.3 (2006-06-01) on tigger.example.com X-Virus-Scanned: ClamAV 0.88.4/2193/Tue Nov 14 09:03:11 2006 on tigger.example.com X-Virus-Status: Clean Cc: freebsd-stable@freebsd.org Subject: Re: audit and quota don't get along X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Nov 2006 17:02:50 -0000 On Nov 14, 2006, at 4:31 AM, Robert Watson wrote: > > A backtrace would be helpful. > Fatal trap 12: page fault while in kernel mode fault virtual address = 0x0 fault code = supervisor read, page not present instruction pointer = 0x20:0xc06a1728 stack pointer = 0x28:0xcdb68c34 frame pointer = 0x28:0xcdb68c3c code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = resume, IOPL = 0 current process = 568 (auditd) [thread pid 568 tid 100047 ] Stopped at 0xc06a1728 = turnstile_broadcast+0x30: cmpl $0,0(% esi) db> bt Tracing pid 568 tid 100047 td 0xc247bc00 turnstile_broadcast(0,c247bc00,0,cdb68cdc,c07c1e1b,...) at 0xc06a1728 = turnstile_broadcast+0x30 _mtx_unlock_sleep(c09f7780,0,0,0) at 0xc06776a7 = _mtx_unlock_sleep+0x3f auditctl(c247bc00,cdb68d04) at 0xc07c1e1b = auditctl+0x14f syscall(3b,3b,3b,8054200,7,...) at 0xc08a154b = syscall+0x2cf Xint0x80_syscall() at 0xc088e94f = Xint0x80_syscall+0x1f --- syscall (453, FreeBSD ELF32, auditctl), eip = 0x280cbcb7, esp = 0xbfbfec1c, ebp = 0xbfbfec88 --- db> > Are you using quotas on the file system targeted by the audit > trail, or just on the system in general? Just on the system, but I'd like to have them together. > Is compiling quotas in sufficient to reproduce the problem, or must > quotas be enabled on at least one file system? Compiling quotas in is sufficient. Steve