Eric Paris <eparis@redhat.com> wrote:> WARN_ON(cred != current->cred && cred->refcnt != 1)'tsk->parent == current' perhaps? Or audit_alloc() could pass a flagindicating the state, or just look to see if tsk->audit_context is still NULL.David