• Paul Moore's avatar
    revert: 1320a405 ("audit: trigger accompanying records when no rules present") · 8ac68dc4
    Paul Moore authored
    Unfortunately the commit listed in the subject line above failed
    to ensure that the task's audit_context was properly initialized/set
    before enabling the "accompanying records".  Depending on the
    situation, the resulting audit_context could have invalid values in
    some of it's fields which could cause a kernel panic/oops when the
    task/syscall exists and the audit records are generated.
    
    We will revisit the original patch, with the necessary fixes, in a
    future kernel but right now we just want to fix the kernel panic
    with the least amount of added risk.
    
    Cc: stable@vger.kernel.org
    Fixes: 1320a405 ("audit: trigger accompanying records when no rules present")
    Reported-by: j2468h@googlemail.com
    Signed-off-by: default avatarPaul Moore <paul@paul-moore.com>
    8ac68dc4
auditsc.c 70.6 KB