[PATCH 0/2] audit: Fix two bugs with deleting audit watches

Jan Kara jack at suse.cz
Tue Aug 15 11:00:35 UTC 2017


Hello,

Tony pointed me to a long-standing use after free issue in audit watch
subsystem. The first patch should fix this. When analyzing and fixing
that issue, I've noticed that audit watch does not received FS_UNMOUNT
event although from the code it seems it expects to receive it - patch
two fixes that. The patches survive some basic testing but especially
for the second patch I'd like someone with more experience with audit
subsystem to have a look whether the patch makes sense.

								Honza




More information about the Linux-audit mailing list