On Tue, Jul 10, 2018 at 1:02 PM, Jan Kara <[email protected]> wrote: > Audit tree code currently associates new fsnotify mark with each new > chunk. As chunk attached to an inode is replaced when new tag is added / > removed, we also need to remove old fsnotify mark and add a new one on > such occasion. This is cumbersome and makes locking rules somewhat > difficult to follow. > > Fix these problems by allocating fsnotify mark independently of chunk > and keeping it all the time while there is some chunk attached to an > inode. Also add documentation about the locking rules so that things are > easier to follow. > > Signed-off-by: Jan Kara <[email protected]> > ---
Well, if there are bugs here I can't find them, but they sure have a lot of places to hide... Cheers, Amir. -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
