diff options
| author | Amy Griffis <amy.griffis@hp.com> | 2006-07-13 13:16:39 -0400 |
|---|---|---|
| committer | Al Viro <viro@zeniv.linux.org.uk> | 2006-08-03 10:50:30 -0400 |
| commit | 73d3ec5abad3f1730ac8530899d2c14d92f3ad63 (patch) | |
| tree | c2829a1e36ca155eecc7d4b8648fe9755247bec5 /include/linux/audit.h | |
| parent | 3e2efce067cec0099f99ae59f28feda99b02b498 (diff) | |
| download | kernel-crypto-73d3ec5abad3f1730ac8530899d2c14d92f3ad63.tar.gz kernel-crypto-73d3ec5abad3f1730ac8530899d2c14d92f3ad63.tar.xz kernel-crypto-73d3ec5abad3f1730ac8530899d2c14d92f3ad63.zip | |
[PATCH] fix missed create event for directory audit
When an object is created via a symlink into an audited directory, audit misses
the event due to not having collected the inode data for the directory. Modify
__audit_inode_child() to copy the parent inode data if a parent wasn't found in
audit_names[].
Signed-off-by: Amy Griffis <amy.griffis@hp.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Diffstat (limited to 'include/linux/audit.h')
| -rw-r--r-- | include/linux/audit.h | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/include/linux/audit.h b/include/linux/audit.h index e7e5e534898..bf196c05826 100644 --- a/include/linux/audit.h +++ b/include/linux/audit.h @@ -327,7 +327,7 @@ extern void __audit_getname(const char *name); extern void audit_putname(const char *name); extern void __audit_inode(const char *name, const struct inode *inode); extern void __audit_inode_child(const char *dname, const struct inode *inode, - unsigned long pino); + const struct inode *parent); extern void __audit_inode_update(const struct inode *inode); static inline void audit_getname(const char *name) { @@ -339,10 +339,10 @@ static inline void audit_inode(const char *name, const struct inode *inode) { __audit_inode(name, inode); } static inline void audit_inode_child(const char *dname, - const struct inode *inode, - unsigned long pino) { + const struct inode *inode, + const struct inode *parent) { if (unlikely(current->audit_context)) - __audit_inode_child(dname, inode, pino); + __audit_inode_child(dname, inode, parent); } static inline void audit_inode_update(const struct inode *inode) { if (unlikely(current->audit_context)) |