AUDIT: Report lookup flags with path/inode records.
When LOOKUP_PARENT is used, the inode which results is not the inode found at the pathname. Report the flags so that this doesn't generate misleading audit records. Signed-off-by: David Woodhouse <dwmw2@infradead.org>
This commit is contained in:
@ -1043,7 +1043,7 @@ int fastcall path_lookup(const char *name, unsigned int flags, struct nameidata
|
||||
out:
|
||||
if (unlikely(current->audit_context
|
||||
&& nd && nd->dentry && nd->dentry->d_inode))
|
||||
audit_inode(name, nd->dentry->d_inode);
|
||||
audit_inode(name, nd->dentry->d_inode, flags);
|
||||
return retval;
|
||||
}
|
||||
|
||||
|
Reference in New Issue
Block a user