---

yaml --- r: 28025 b: refs/heads/master c: 3c66251 h: refs/heads/master i: 28023: f147f7b v: v3
git-mirror · Jun 20, 2006 · fddc39a · fddc39a
1 parent 9105348
commit fddc39a
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 1 deletion.
diff --git a/[refs] b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: f46038ff7d23ae092d61b366332c05aab8227b48
+refs/heads/master: 3c66251e573219a0532a5a07381b2f60a412d9eb
diff --git a/trunk/include/linux/audit.h b/trunk/include/linux/audit.h
@@ -152,6 +152,7 @@
 #define AUDIT_SE_TYPE	15	/* security label type */
 #define AUDIT_SE_SEN	16	/* security label sensitivity label */
 #define AUDIT_SE_CLR	17	/* security label clearance label */
+#define AUDIT_PPID	18
 
 				/* These are ONLY useful when checking
 				 * at syscall exit time (AUDIT_AT_EXIT). */

diff --git a/trunk/kernel/auditsc.c b/trunk/kernel/auditsc.c
@@ -188,6 +188,10 @@ static int audit_filter_rules(struct task_struct *tsk,
 		case AUDIT_PID:
 			result = audit_comparator(tsk->pid, f->op, f->val);
 			break;
+		case AUDIT_PPID:
+			if (ctx)
+				result = audit_comparator(ctx->ppid, f->op, f->val);
+			break;
 		case AUDIT_UID:
 			result = audit_comparator(tsk->uid, f->op, f->val);
 			break;