[RFC][PATCH] (#5, U3) filesystem auditing

[Timothy R. Chavez]

On Wednesday 09 March 2005 02:01 pm, Timothy R. Chavez wrote:
>
> Just a quick note.  Loulwa received a kernel panic this morning when
> rebooting with patch #5 U3.  I was unable to look at the panic message (it
> was related to the VFS) she got earlier and I've not received such a panic
> on my machine with the patch applied.  If you do happen to patch with #5 U3
> can you tell me what architecture you patched on and booted with and if you
> got a panic (and any other information you could gather associated with the
> panic) or not.  It's my intention to test this code on as many platforms as
> possible, but I'm really short on time at the moment. Thanks.
> -tim

So I experienced the problem.  One problem was passing victim (dentry), rather 
then victim->d_inode (oops).  But also, I think there might be another, more 
fundamental flaw in that I'm operating on a inode->i_audit reference that 
could be pulled out from under us in some places.  I'm currently looking into 
this (if it is possible) in some notable places.  I'll post another patch 
tonight with at least the obvious fix.  Sorry about that.

-tim