Revision b5fed474b98332559f2590c6bc90388a0899e793 authored by Jan Kara on 15 August 2017, 11:00:37 UTC, committed by Paul Moore on 15 August 2017, 20:03:00 UTC
Although audit_watch_handle_event() can handle FS_UNMOUNT event, it is not part of AUDIT_FS_WATCH mask and thus such event never gets to audit_watch_handle_event(). Thus fsnotify marks are deleted by fsnotify subsystem on unmount without audit being notified about that which leads to a strange state of existing audit rules with dead fsnotify marks. Add FS_UNMOUNT to the mask of events to be received so that audit can clean up its state accordingly. Signed-off-by: Jan Kara <jack@suse.cz> Signed-off-by: Paul Moore <paul@paul-moore.com>
1 parent d76036a
File | Mode | Size |
---|---|---|
lxdialog | ||
.gitignore | -rw-r--r-- | 167 bytes |
Makefile | -rw-r--r-- | 10.7 KB |
POTFILES.in | -rw-r--r-- | 361 bytes |
check.sh | -rwxr-xr-x | 214 bytes |
conf.c | -rw-r--r-- | 15.7 KB |
confdata.c | -rw-r--r-- | 25.6 KB |
expr.c | -rw-r--r-- | 26.9 KB |
expr.h | -rw-r--r-- | 7.1 KB |
gconf.c | -rw-r--r-- | 38.2 KB |
gconf.glade | -rw-r--r-- | 25.0 KB |
images.c | -rw-r--r-- | 6.4 KB |
kxgettext.c | -rw-r--r-- | 4.1 KB |
list.h | -rw-r--r-- | 3.6 KB |
lkc.h | -rw-r--r-- | 4.4 KB |
lkc_proto.h | -rw-r--r-- | 2.1 KB |
mconf.c | -rw-r--r-- | 27.7 KB |
menu.c | -rw-r--r-- | 17.5 KB |
merge_config.sh | -rwxr-xr-x | 4.2 KB |
nconf.c | -rw-r--r-- | 38.5 KB |
nconf.gui.c | -rw-r--r-- | 14.7 KB |
nconf.h | -rw-r--r-- | 1.9 KB |
qconf.cc | -rw-r--r-- | 44.2 KB |
qconf.h | -rw-r--r-- | 7.4 KB |
streamline_config.pl | -rwxr-xr-x | 16.2 KB |
symbol.c | -rw-r--r-- | 30.4 KB |
util.c | -rw-r--r-- | 2.9 KB |
zconf.gperf | -rw-r--r-- | 1.5 KB |
zconf.hash.c_shipped | -rw-r--r-- | 12.4 KB |
zconf.l | -rw-r--r-- | 6.9 KB |
zconf.lex.c_shipped | -rw-r--r-- | 58.5 KB |
zconf.tab.c_shipped | -rw-r--r-- | 70.2 KB |
zconf.y | -rw-r--r-- | 15.7 KB |
Computing file changes ...