diff options
| author | David Woodhouse <dwmw2@shinybook.infradead.org> | 2005-07-13 23:39:34 +0200 |
|---|---|---|
| committer | David Woodhouse <dwmw2@shinybook.infradead.org> | 2005-07-13 23:39:34 +0200 |
| commit | 582edda586120004d0fb67113115fa442a0a1571 (patch) | |
| tree | 44524dc0424f455c06a58ab4223f21d2efc45948 /kernel | |
| parent | [AUDIT] Fix sparse warning about gfp_mask type (diff) | |
| download | linux-582edda586120004d0fb67113115fa442a0a1571.tar.xz linux-582edda586120004d0fb67113115fa442a0a1571.zip | |
AUDIT: Exempt the whole auditd thread-group from auditing
and not just the one thread.
Signed-off-by: David Woodhouse <dwmw2@infradead.org>
Diffstat (limited to 'kernel')
| -rw-r--r-- | kernel/auditsc.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/kernel/auditsc.c b/kernel/auditsc.c index 0fdd90194ecc..86d91fe2d93a 100644 --- a/kernel/auditsc.c +++ b/kernel/auditsc.c @@ -516,7 +516,7 @@ static enum audit_state audit_filter_syscall(struct task_struct *tsk, int word = AUDIT_WORD(ctx->major); int bit = AUDIT_BIT(ctx->major); - if (audit_pid && tsk->pid == audit_pid) + if (audit_pid && tsk->tgid == audit_tgid) return AUDIT_DISABLED; rcu_read_lock(); @@ -1255,7 +1255,7 @@ void audit_signal_info(int sig, struct task_struct *t) extern pid_t audit_sig_pid; extern uid_t audit_sig_uid; - if (unlikely(audit_pid && t->pid == audit_pid)) { + if (unlikely(audit_pid && t->tgid == audit_pid)) { if (sig == SIGTERM || sig == SIGHUP) { struct audit_context *ctx = current->audit_context; audit_sig_pid = current->pid; |