From d89db33964903a7cfa1dce6977d79b033e4e1495 Mon Sep 17 00:00:00 2001
From: Steve Grubb <sgrubb@redhat.com>
Date: Tue, 11 Apr 2006 08:50:56 -0400
Subject: [PATCH] --- yaml --- r: 26456 b: refs/heads/master c:
 2ad312d2093ae506ae0fa184d8d026b559083087 h: refs/heads/master v: v3

---
 [refs]                 |  2 +-
 trunk/kernel/auditsc.c | 11 +++++++----
 2 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/[refs] b/[refs]
index 19b0756fb12f..c5d679161e3f 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 073115d6b29c7910feaa08241c6484637f5ca958
+refs/heads/master: 2ad312d2093ae506ae0fa184d8d026b559083087
diff --git a/trunk/kernel/auditsc.c b/trunk/kernel/auditsc.c
index a300736ee037..1c03a4ed1b27 100644
--- a/trunk/kernel/auditsc.c
+++ b/trunk/kernel/auditsc.c
@@ -168,11 +168,9 @@ static int audit_filter_rules(struct task_struct *tsk,
 			      struct audit_context *ctx,
 			      enum audit_state *state)
 {
-	int i, j;
+	int i, j, need_sid = 1;
 	u32 sid;
 
-	selinux_task_ctxid(tsk, &sid);
-
 	for (i = 0; i < rule->field_count; i++) {
 		struct audit_field *f = &rule->fields[i];
 		int result = 0;
@@ -271,11 +269,16 @@ static int audit_filter_rules(struct task_struct *tsk,
 			   match for now to avoid losing information that
 			   may be wanted.   An error message will also be
 			   logged upon error */
-			if (f->se_rule)
+			if (f->se_rule) {
+				if (need_sid) {
+					selinux_task_ctxid(tsk, &sid);
+					need_sid = 0;
+				}
 				result = selinux_audit_rule_match(sid, f->type,
 				                                  f->op,
 				                                  f->se_rule,
 				                                  ctx);
+			}
 			break;
 		case AUDIT_ARG0:
 		case AUDIT_ARG1: