tjh.dev / kernel
Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux
1
fork

Configure Feed

Select the types of activity you want to include in your feed.

Merge tag 'audit-pr-20220826' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit

Pull audit fix from Paul Moore:
"Another small audit patch, this time to fix a bug where the return
codes were not properly set before the audit filters were run,
potentially resulting in missed audit records"

* tag 'audit-pr-20220826' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit:
audit: move audit_return_fixup before the filters

Linus Torvalds 17b28d42 89b749d8

+2 -2
+2 -2
kernel/auditsc.c
··· 1940 1940 goto out; 1941 1941 } 1942 1942 1943 + audit_return_fixup(ctx, success, code); 1943 1944 if (ctx->context == AUDIT_CTX_SYSCALL) { 1944 1945 /* 1945 1946 * NOTE: See the note in __audit_uring_entry() about the case ··· 1982 1981 audit_filter_inodes(current, ctx); 1983 1982 if (ctx->current_state != AUDIT_STATE_RECORD) 1984 1983 goto out; 1985 - audit_return_fixup(ctx, success, code); 1986 1984 audit_log_exit(); 1987 1985 1988 1986 out: ··· 2065 2065 if (!list_empty(&context->killed_trees)) 2066 2066 audit_kill_trees(context); 2067 2067 2068 + audit_return_fixup(context, success, return_code); 2068 2069 /* run through both filters to ensure we set the filterkey properly */ 2069 2070 audit_filter_syscall(current, context); 2070 2071 audit_filter_inodes(current, context); 2071 2072 if (context->current_state < AUDIT_STATE_RECORD) 2072 2073 goto out; 2073 2074 2074 - audit_return_fixup(context, success, return_code); 2075 2075 audit_log_exit(); 2076 2076 2077 2077 out: