Commit 35ce9888 authored Sep 11, 2012 by Eric W. Biederman

audit: Properly set the origin port id of audit messages.

For user generated audit messages set the portid field in the netlink
header to the netlink port where the user generated audit message came
from.  Reporting the process id in a port id field was just nonsense.

Cc: Al Viro <viro@zeniv.linux.org.uk>
Cc: Eric Paris <eparis@redhat.com>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>

parent 8aa14b64

kernel/audit.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -751,7 +751,7 @@ static int audit_receive_msg(struct sk_buff skb, struct nlmsghdr nlh)
		size--;
		audit_log_n_untrustedstring(ab, data, size);
		}
		audit_set_pid(ab, pid);
		audit_set_pid(ab, NETLINK_CB(skb).pid);
		audit_log_end(ab);
		}
		break;

Admin message