[PATCH] audit: use ktime_get_coarse_real_ts64() for timestamps

[Arnd Bergmann]

On Tue, Jul 17, 2018 at 8:58 PM, Paul Moore <paul at paul-moore.com> wrote:
> Commit c72051d5778a ("audit: use ktime_get_coarse_ts64() for time
> access") converted audit's use of current_kernel_time64() to the
> new ktime_get_coarse_ts64() function.  Unfortunately this resulted
> in incorrect timestamps, e.g. events stamped with the year 1969
> despite it being 2018.  This patch corrects this by using
> ktime_get_coarse_real_ts64() just like the current_kernel_time64()
> wrapper.
>
> Fixes: c72051d5778a ("audit: use ktime_get_coarse_ts64() for time access")
> Signed-off-by: Paul Moore <paul at paul-moore.com>

Sorry about my mistake, I clearly intended to use the 'real' accessors
here, but ended up with a typo after many other calls got converted
to the monotonic version on purpose.

Reviewed-by: Arnd Bergmann <arnd at arndb.de>