Files
android_kernel_xiaomi_sm8450/kernel
Jan Kara b5fed474b9 audit: Receive unmount event
Although audit_watch_handle_event() can handle FS_UNMOUNT event, it is
not part of AUDIT_FS_WATCH mask and thus such event never gets to
audit_watch_handle_event(). Thus fsnotify marks are deleted by fsnotify
subsystem on unmount without audit being notified about that which leads
to a strange state of existing audit rules with dead fsnotify marks.

Add FS_UNMOUNT to the mask of events to be received so that audit can
clean up its state accordingly.

Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Paul Moore <paul@paul-moore.com>
2017-08-15 16:03:00 -04:00
..
2017-08-15 16:03:00 -04:00
2017-06-12 18:07:43 -04:00
2017-01-12 07:01:56 -07:00
2017-03-24 21:51:33 +08:00
2017-02-27 18:43:47 -08:00
2016-12-22 22:58:37 -05:00