On Mon, May 25, 2020 at 3:22 AM Yiwen Gu <[email protected]> wrote: > For now, we met a situation where the audit_reusename checking > function returns the same filename structure for files sharing > the same uptr. However, these files are different, and we are trying > to open them in a loop where the names are loaded into the same address. > Therefore, the function returns the same structure for different files. > By the way, may I ask in what situation would the audit_list be kept > across syscalls?
What kernel are you using? Is this an Android kernel? Do you have a reproducer you can share? -- paul moore www.paul-moore.com -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
