From d788d538119e66bff73593a93aff797c64a0a117 Mon Sep 17 00:00:00 2001 From: Eric Paris Date: Mon, 7 Jan 2008 13:49:15 -0500 Subject: [PATCH] --- yaml --- r: 82029 b: refs/heads/master c: c0641f28dcbecb6dc34a4fd003a9947fcd080696 h: refs/heads/master i: 82027: 4ff5ba2b8b4bf1968fbf780316b5fa24018f1696 v: v3 --- [refs] | 2 +- trunk/include/linux/audit.h | 1 + trunk/kernel/auditsc.c | 5 +++++ 3 files changed, 7 insertions(+), 1 deletion(-) diff --git a/[refs] b/[refs] index b4fe631877c9..13ab0c3b7a98 100644 --- a/[refs] +++ b/[refs] @@ -1,2 +1,2 @@ --- -refs/heads/master: 4746ec5b01ed07205a91e4f7ed9de9d70f371407 +refs/heads/master: c0641f28dcbecb6dc34a4fd003a9947fcd080696 diff --git a/trunk/include/linux/audit.h b/trunk/include/linux/audit.h index 52f1b12505a9..4d1c2f2fcc1b 100644 --- a/trunk/include/linux/audit.h +++ b/trunk/include/linux/audit.h @@ -98,6 +98,7 @@ #define AUDIT_FD_PAIR 1317 /* audit record for pipe/socketpair */ #define AUDIT_OBJ_PID 1318 /* ptrace target */ #define AUDIT_TTY 1319 /* Input on an administrative TTY */ +#define AUDIT_EOE 1320 /* End of multi-record event */ #define AUDIT_AVC 1400 /* SE Linux avc denial or grant */ #define AUDIT_SELINUX_ERR 1401 /* Internal SE Linux Errors */ diff --git a/trunk/kernel/auditsc.c b/trunk/kernel/auditsc.c index 4e67abb02904..6e5de767bad1 100644 --- a/trunk/kernel/auditsc.c +++ b/trunk/kernel/auditsc.c @@ -1270,6 +1270,11 @@ static void audit_log_exit(struct audit_context *context, struct task_struct *ts audit_log_end(ab); } + + /* Send end of event record to help user space know we are finished */ + ab = audit_log_start(context, GFP_KERNEL, AUDIT_EOE); + if (ab) + audit_log_end(ab); if (call_panic) audit_panic("error converting sid to string"); }