diff options
| author | Richard Guy Briggs <rgb@redhat.com> | 2018-12-10 17:17:50 -0500 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2019-04-05 22:34:51 +0200 |
| commit | e78d5e16f1d6ea80c67c0eb1631f86add4896c26 (patch) | |
| tree | 51d7b29ebd2b45821157704f5eacff9e62975bb0 /security/selinux/hooks.c | |
| parent | a43ea8ca186574f871c79f05fa7d04fad173d731 (diff) | |
| download | talos-obmc-linux-e78d5e16f1d6ea80c67c0eb1631f86add4896c26.tar.gz talos-obmc-linux-e78d5e16f1d6ea80c67c0eb1631f86add4896c26.zip | |
audit: hand taken context to audit_kill_trees for syscall logging
[ Upstream commit 9e36a5d49c3a6fc4a2e0ba2dc11b27c4a8ae6303 ]
Since the context is derived from the task parameter handed to
__audit_free(), hand the context to audit_kill_trees() so it can be used
to associate with a syscall record. This requires adding the context
parameter to kill_rules() rather than using the current audit_context.
The callers of trim_marked() and evict_chunk() still have their context.
The EOE record was being issued prior to the pruning of the killed_tree
list.
Move the kill_trees call before the audit_log_exit call in
__audit_free() and __audit_syscall_exit() so that any pruned trees
CONFIG_CHANGE records are included with the associated syscall event by
the user library due to the EOE record flagging the end of the event.
See: https://github.com/linux-audit/audit-kernel/issues/50
See: https://github.com/linux-audit/audit-kernel/issues/59
Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
[PM: fixed merge fuzz in kernel/audit_tree.c]
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'security/selinux/hooks.c')
0 files changed, 0 insertions, 0 deletions
