summaryrefslogtreecommitdiffstats
path: root/kernel/audit_watch.c
diff options
context:
space:
mode:
authorRichard Guy Briggs <rgb@redhat.com>2016-01-26 00:04:15 +0100
committerPaul Moore <paul@paul-moore.com>2016-01-26 00:04:15 +0100
commit935c9e7ff06abf12c45155f75ec2f712d3768095 (patch)
treeac1118ff77239fe8f939c9bfd2afe37cc5c4fa19 /kernel/audit_watch.c
parentaudit: stop an old auditd being starved out by a new auditd (diff)
downloadlinux-935c9e7ff06abf12c45155f75ec2f712d3768095.tar.xz
linux-935c9e7ff06abf12c45155f75ec2f712d3768095.zip
audit: log failed attempts to change audit_pid configuration
Failed attempts to change the audit_pid configuration are not presently logged. One case is an attempt to starve an old auditd by starting up a new auditd when the old one is still alive and active. The other case is an attempt to orphan a new auditd when an old auditd shuts down. Log both as AUDIT_CONFIG_CHANGE messages with failure result. Signed-off-by: Richard Guy Briggs <rgb@redhat.com> Signed-off-by: Paul Moore <pmoore@redhat.com>
Diffstat (limited to 'kernel/audit_watch.c')
0 files changed, 0 insertions, 0 deletions