Eric Paris <[email protected]> wrote:

> WARN_ON(cred != current->cred && cred->refcnt != 1)

'tsk->parent == current' perhaps?  Or audit_alloc() could pass a flag
indicating the state, or just look to see if tsk->audit_context is still NULL.

David

--
Linux-audit mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/linux-audit

Reply via email to