[PATCH] Audit: close race between audit_syscall_exit and proc_loginuid_read

Steve Grubb sgrubb at redhat.com
Wed Oct 3 18:29:35 UTC 2007


On Wednesday 03 October 2007 14:21:35 Eric Paris wrote:
> audit_syscall_exit() calls audit_get_context() which returns the
> tsk->audit_context but then also sets tsk->audit_context=NULL.

The preferred way to solve this problem is to promote loginuid to be part of 
the task structure. We also have another problem where if the audit system is 
temporarily disabled, loginuid will not be set in any new programs. What we'd 
like to have happen is loginuid be available and usable all the time so that 
we always know the auid when the audit system starts back up.

-Steve




More information about the Linux-audit mailing list