audit: anchor all pid references in the initial pid namespace

Browse source

Store and log all PIDs with reference to the initial PID namespace and
use the access functions task_pid_nr() and task_tgid_nr() for task->pid
and task->tgid.

Cc: "Eric W. Biederman" <ebiederm@xmission.com>
(informed by ebiederman's c776b5d2)
Signed-off-by: Richard Guy Briggs <rgb@redhat.com>

...

This commit is contained in:

Richard Guy Briggs 2013-12-11 13:52:26 -05:00 • committed by Eric Paris

parent c92cdeb45e

commit f1dc4867ff

6 changed files with 38 additions and 16 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

3

drivers/tty/tty_audit.c

View file

5

kernel/audit.c

View file

17

kernel/auditfilter.c

View file

16

kernel/auditsc.c

View file

2

security/integrity/integrity_audit.c

View file

11

security/lsm_audit.c

View file