audit: Send replies in the proper network namespace.

Browse source

In perverse cases of file descriptor passing the current network
namespace of a process and the network namespace of a socket used by
that socket may differ.  Therefore use the network namespace of the
appropiate socket to ensure replies always go to the appropiate
socket.

Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Acked-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Eric Paris <eparis@redhat.com>

...

This commit is contained in:

Eric W. Biederman 2014-02-28 20:36:55 -08:00 • committed by Eric Paris

parent 638a0fd2a0

commit 099dd23511

3 changed files with 17 additions and 14 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

3

include/linux/audit.h

View file

21

kernel/audit.c

View file

7

kernel/auditfilter.c

View file