diff options
| author | Richard Guy Briggs <rgb@redhat.com> | 2019-02-06 01:19:06 +0300 |
|---|---|---|
| committer | Paul Moore <paul@paul-moore.com> | 2019-02-08 05:33:54 +0300 |
| commit | 18f5c1d567a5d16aa6ebac6a2f42e51fc5030baa (patch) | |
| tree | 34a9b76a00d9dad9c266a6724e7e1f5782052f89 | |
| parent | 5f3d544f1671d214cd26e45bda326f921455256e (diff) | |
| download | linux-18f5c1d567a5d16aa6ebac6a2f42e51fc5030baa.tar.xz | |
audit: join tty records to their syscall
AUDIT_TTY records were logged as seperate events from their syscall
records. Join them so they are logged as the single event that they
are.
Please see the github issue
https://github.com/linux-audit/audit-kernel/issues/106
Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
| -rw-r--r-- | drivers/tty/tty_audit.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/tty/tty_audit.c b/drivers/tty/tty_audit.c index 28f87fd6a28e..9f906a5b8e81 100644 --- a/drivers/tty/tty_audit.c +++ b/drivers/tty/tty_audit.c @@ -66,7 +66,7 @@ static void tty_audit_log(const char *description, dev_t dev, uid_t loginuid = from_kuid(&init_user_ns, audit_get_loginuid(current)); unsigned int sessionid = audit_get_sessionid(current); - ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_TTY); + ab = audit_log_start(audit_context(), GFP_KERNEL, AUDIT_TTY); if (ab) { char name[sizeof(current->comm)]; |