[PATCH] Audit: close race between audit_syscall_exit and proc_loginuid_read
Steve Grubb
sgrubb at redhat.com
Wed Oct 3 18:29:35 UTC 2007
On Wednesday 03 October 2007 14:21:35 Eric Paris wrote:
> audit_syscall_exit() calls audit_get_context() which returns the
> tsk->audit_context but then also sets tsk->audit_context=NULL.
The preferred way to solve this problem is to promote loginuid to be part of
the task structure. We also have another problem where if the audit system is
temporarily disabled, loginuid will not be set in any new programs. What we'd
like to have happen is loginuid be available and usable all the time so that
we always know the auid when the audit system starts back up.
-Steve
More information about the Linux-audit
mailing list