提交 9e94e66a 编写于 作者: D David Woodhouse

AUDIT: No really, we don't want to audit auditd.

Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>
上级 9470178e
......@@ -573,7 +573,7 @@ static inline struct audit_context *audit_get_context(struct task_struct *tsk,
context->return_valid = return_valid;
context->return_code = return_code;
if (context->in_syscall && !context->auditable) {
if (context->in_syscall && !context->auditable && tsk->pid != audit_pid) {
enum audit_state state;
state = audit_filter_syscall(tsk, context, &audit_filter_list[AUDIT_FILTER_EXIT]);
if (state == AUDIT_RECORD_CONTEXT)
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册