lkml.org 
[lkml]   [2013]   [May]   [6]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH RFC 33/48] Audit: Log filter related audit message to proper user namespace
    Date
    Now, we can log filter related audit message to the user namespace
    which the task belongs to.

    Signed-off-by: Gao feng <gaofeng@cn.fujitsu.com>
    ---
    kernel/auditfilter.c | 9 +++++----
    1 file changed, 5 insertions(+), 4 deletions(-)

    diff --git a/kernel/auditfilter.c b/kernel/auditfilter.c
    index f2afe9b..8af148b 100644
    --- a/kernel/auditfilter.c
    +++ b/kernel/auditfilter.c
    @@ -1120,15 +1120,16 @@ static void audit_log_rule_change(kuid_t loginuid, u32 sessionid, u32 sid,
    int res)
    {
    struct audit_buffer *ab;
    + struct user_namespace *ns = current_user_ns();

    - if (!audit_enabled)
    + if (!ns->audit.enabled)
    return;

    - ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE);
    + ab = audit_log_start_ns(ns, NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE);
    if (!ab)
    return;
    audit_log_format(ab, "auid=%u ses=%u",
    - from_kuid(&init_user_ns, loginuid), sessionid);
    + from_kuid(ns, loginuid), sessionid);
    if (sid) {
    char *ctx = NULL;
    u32 len;
    @@ -1143,7 +1144,7 @@ static void audit_log_rule_change(kuid_t loginuid, u32 sessionid, u32 sid,
    audit_log_string(ab, action);
    audit_log_key(ab, rule->filterkey);
    audit_log_format(ab, " list=%d res=%d", rule->listnr, res);
    - audit_log_end(ab);
    + audit_log_end_ns(ns, ab);
    }

    /**
    --
    1.8.1.4


    \
     
     \ /
      Last update: 2013-05-07 07:23    [W:5.913 / U:0.836 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site