Eric Paris <eparis at redhat.com> wrote: > WARN_ON(cred != current->cred && cred->refcnt != 1) 'tsk->parent == current' perhaps? Or audit_alloc() could pass a flag indicating the state, or just look to see if tsk->audit_context is still NULL. David