idr_remove

[Russell Coker]

http://marc.theaimsgroup.com/?l=linux-kernel&m=109838483518162&w=2

I am getting messages "idr_remove called for id=0 which is not allocated" when 
SE Linux denies search access to /dev/pts.

The attached file has some klogd output showing the situation, triggered in 
this case by installing a new kernel package on a SE Debian system.  The 
above URL references Jim Houston's message with the patch to add this 
warning.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page
Jan 17 13:45:43 lyta kernel: audit(1105929943.164:0): avc:  denied  { search } for  pid=30322 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:43 lyta kernel: idr_remove called for id=0 which is not allocated.
Jan 17 13:45:43 lyta kernel:  [dump_stack+23/32] dump_stack+0x17/0x20
Jan 17 13:45:43 lyta kernel:  [sub_remove+233/240] sub_remove+0xe9/0xf0
Jan 17 13:45:43 lyta kernel:  [idr_remove+35/144] idr_remove+0x23/0x90
Jan 17 13:45:43 lyta kernel:  [release_dev+1636/1968] release_dev+0x664/0x7b0
Jan 17 13:45:43 lyta kernel:  [tty_open+254/656] tty_open+0xfe/0x290
Jan 17 13:45:43 lyta kernel:  [chrdev_open+258/496] chrdev_open+0x102/0x1f0
Jan 17 13:45:43 lyta kernel:  [dentry_open+342/576] dentry_open+0x156/0x240
Jan 17 13:45:43 lyta kernel:  [filp_open+77/80] filp_open+0x4d/0x50
Jan 17 13:45:43 lyta kernel:  [sys_open+60/160] sys_open+0x3c/0xa0
Jan 17 13:45:43 lyta kernel:  [sysenter_past_esp+82/117] sysenter_past_esp+0x52/0x75
Jan 17 13:45:43 lyta kernel: audit(1105929943.347:0): avc:  denied  { search } for  pid=30322 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:43 lyta kernel: audit(1105929943.425:0): avc:  denied  { search } for  pid=30328 exe=/usr/bin/stat name=run dev=dm-2 ino=597921 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:var_run_t tclass=dir
Jan 17 13:45:43 lyta kernel: audit(1105929943.486:0): avc:  denied  { search } for  pid=30328 exe=/usr/bin/stat name=run dev=dm-2 ino=597921 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:var_run_t tclass=dir
Jan 17 13:45:43 lyta kernel: audit(1105929943.563:0): avc:  denied  { search } for  pid=30333 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:43 lyta kernel: idr_remove called for id=0 which is not allocated.
Jan 17 13:45:43 lyta kernel:  [dump_stack+23/32] dump_stack+0x17/0x20
Jan 17 13:45:43 lyta kernel:  [sub_remove+233/240] sub_remove+0xe9/0xf0
Jan 17 13:45:43 lyta kernel:  [idr_remove+35/144] idr_remove+0x23/0x90
Jan 17 13:45:43 lyta kernel:  [release_dev+1636/1968] release_dev+0x664/0x7b0
Jan 17 13:45:43 lyta kernel:  [tty_open+254/656] tty_open+0xfe/0x290
Jan 17 13:45:43 lyta kernel:  [chrdev_open+258/496] chrdev_open+0x102/0x1f0
Jan 17 13:45:43 lyta kernel:  [dentry_open+342/576] dentry_open+0x156/0x240
Jan 17 13:45:43 lyta kernel:  [filp_open+77/80] filp_open+0x4d/0x50
Jan 17 13:45:43 lyta kernel:  [sys_open+60/160] sys_open+0x3c/0xa0
Jan 17 13:45:43 lyta kernel:  [sysenter_past_esp+82/117] sysenter_past_esp+0x52/0x75
Jan 17 13:45:43 lyta kernel: audit(1105929943.713:0): avc:  denied  { search } for  pid=30333 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:43 lyta kernel: audit(1105929943.785:0): avc:  denied  { search } for  pid=30337 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:43 lyta kernel: idr_remove called for id=0 which is not allocated.
Jan 17 13:45:43 lyta kernel:  [dump_stack+23/32] dump_stack+0x17/0x20
Jan 17 13:45:43 lyta kernel:  [sub_remove+233/240] sub_remove+0xe9/0xf0
Jan 17 13:45:43 lyta kernel:  [idr_remove+35/144] idr_remove+0x23/0x90
Jan 17 13:45:43 lyta kernel:  [release_dev+1636/1968] release_dev+0x664/0x7b0
Jan 17 13:45:43 lyta kernel:  [tty_open+254/656] tty_open+0xfe/0x290
Jan 17 13:45:43 lyta kernel:  [chrdev_open+258/496] chrdev_open+0x102/0x1f0
Jan 17 13:45:43 lyta kernel:  [dentry_open+342/576] dentry_open+0x156/0x240
Jan 17 13:45:43 lyta kernel:  [filp_open+77/80] filp_open+0x4d/0x50
Jan 17 13:45:43 lyta kernel:  [sys_open+60/160] sys_open+0x3c/0xa0
Jan 17 13:45:43 lyta kernel:  [sysenter_past_esp+82/117] sysenter_past_esp+0x52/0x75
Jan 17 13:45:43 lyta kernel: audit(1105929943.902:0): avc:  denied  { search } for  pid=30337 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:44 lyta kernel: audit(1105929943.967:0): avc:  denied  { search } for  pid=30341 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:44 lyta kernel: idr_remove called for id=0 which is not allocated.
Jan 17 13:45:44 lyta kernel:  [dump_stack+23/32] dump_stack+0x17/0x20
Jan 17 13:45:44 lyta kernel:  [sub_remove+233/240] sub_remove+0xe9/0xf0
Jan 17 13:45:44 lyta kernel:  [idr_remove+35/144] idr_remove+0x23/0x90
Jan 17 13:45:44 lyta kernel:  [release_dev+1636/1968] release_dev+0x664/0x7b0
Jan 17 13:45:44 lyta kernel:  [tty_open+254/656] tty_open+0xfe/0x290
Jan 17 13:45:44 lyta kernel:  [chrdev_open+258/496] chrdev_open+0x102/0x1f0
Jan 17 13:45:44 lyta kernel:  [dentry_open+342/576] dentry_open+0x156/0x240
Jan 17 13:45:44 lyta kernel:  [filp_open+77/80] filp_open+0x4d/0x50
Jan 17 13:45:44 lyta kernel:  [sys_open+60/160] sys_open+0x3c/0xa0
Jan 17 13:45:44 lyta kernel:  [sysenter_past_esp+82/117] sysenter_past_esp+0x52/0x75
Jan 17 13:45:44 lyta kernel: audit(1105929944.072:0): avc:  denied  { search } for  pid=30341 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:44 lyta kernel: audit(1105929944.150:0): avc:  denied  { search } for  pid=30345 exe=/bin/bash name=/ dev=devpts ino=1 scontext=system_u:system_r:bootloader_t tcontext=system_u:object_r:devpts_t tclass=dir
Jan 17 13:45:44 lyta kernel: idr_remove called for id=0 which is not allocated.
Jan 17 13:45:44 lyta kernel:  [dump_stack+23/32] dump_stack+0x17/0x20
Jan 17 13:45:44 lyta kernel:  [sub_remove+233/240] sub_remove+0xe9/0xf0
Jan 17 13:45:44 lyta kernel:  [idr_remove+35/144] idr_remove+0x23/0x90
Jan 17 13:45:44 lyta kernel:  [release_dev+1636/1968] release_dev+0x664/0x7b0
Jan 17 13:45:44 lyta kernel:  [tty_open+254/656] tty_open+0xfe/0x290
Jan 17 13:45:44 lyta kernel:  [chrdev_open+258/496] chrdev_open+0x102/0x1f0
Jan 17 13:45:44 lyta kernel:  [dentry_open+342/576] dentry_open+0x156/0x240
Jan 17 13:45:44 lyta kernel:  [filp_open+77/80] filp_open+0x4d/0x50
Jan 17 13:45:44 lyta kernel:  [sys_open+60/160] sys_open+0x3c/0xa0
Jan 17 13:45:44 lyta kernel:  [sysenter_past_esp+82/117] sysenter_past_esp+0x52/0x75