[PATCH] fix inode filtering

Amy Griffis amy.griffis at hp.com
Thu Dec 15 15:46:28 UTC 2005


Inode filter needs to check for .ino, instead of checking for .pino
twice.

(Must have been a merge error somewhere.)


Signed-off-by: Amy Griffis <amy.griffis at hp.com>

diff --git a/kernel/auditsc.c b/kernel/auditsc.c
--- a/kernel/auditsc.c
+++ b/kernel/auditsc.c
@@ -527,7 +527,7 @@ static int audit_filter_rules(struct tas
 		case AUDIT_INODE:
 			if (ctx) {
 				for (j = 0; j < ctx->name_count; j++) {
-					if (audit_comparator(ctx->names[j].pino, op, value) ||
+					if (audit_comparator(ctx->names[j].ino, op, value) ||
 					    audit_comparator(ctx->names[j].pino, op, value)) {
 						++result;
 						break;




More information about the Linux-audit mailing list