Now we can log audit message in the user namespace which current task belongs to.
Signed-off-by: Gao feng <[email protected]> --- security/lsm_audit.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/security/lsm_audit.c b/security/lsm_audit.c index 8d8d97d..90fcd08 100644 --- a/security/lsm_audit.c +++ b/security/lsm_audit.c @@ -392,11 +392,15 @@ void common_lsm_audit(struct common_audit_data *a, void (*post_audit)(struct audit_buffer *, void *)) { struct audit_buffer *ab; + struct user_namespace *ns; if (a == NULL) return; + + ns = current_user_ns(); /* we use GFP_ATOMIC so we won't sleep */ - ab = audit_log_start(current->audit_context, GFP_ATOMIC, AUDIT_AVC); + ab = audit_log_start_ns(ns, current->audit_context, + GFP_ATOMIC, AUDIT_AVC); if (ab == NULL) return; @@ -409,5 +413,5 @@ void common_lsm_audit(struct common_audit_data *a, if (post_audit) post_audit(ab, a); - audit_log_end(ab); + audit_log_end_ns(ns, ab); } -- 1.8.1.4 -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
