]> git.baikalelectronics.ru Git - kernel.git/commit
fixing audit rule ordering mess, part 1
authorAl Viro <viro@zeniv.linux.org.uk>
Mon, 15 Dec 2008 04:45:27 +0000 (23:45 -0500)
committerAl Viro <viro@zeniv.linux.org.uk>
Sun, 4 Jan 2009 20:14:41 +0000 (15:14 -0500)
commit44c09d459474f4fc0c33a1827086246754558337
tree289fa4668ae304f79f7484ac31b2cab0ab8894c1
parent9e2c5c8f83b53315dd0e9745a754ead225072cdd
fixing audit rule ordering mess, part 1

Problem: ordering between the rules on exit chain is currently lost;
all watch and inode rules are listed after everything else _and_
exit,never on one kind doesn't stop exit,always on another from
being matched.

Solution: assign priorities to rules, keep track of the current
highest-priority matching rule and its result (always/never).

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
include/linux/audit.h
kernel/audit.h
kernel/auditfilter.c
kernel/auditsc.c