Audit: fix audit watch use after free

Browse source

When an audit watch is added to a parent the temporary watch inside the
original krule from userspace is freed.  Yet the original watch is used after
the real watch was created in audit_add_rules()

Signed-off-by: Eric Paris <eparis@redhat.com>

...

This commit is contained in:

Eric Paris 2009-06-11 14:31:33 -04:00 • committed by Al Viro

parent 4e8a2372f9

commit 35aa901c0b

1 changed files with 2 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

kernel/auditfilter.c

View file