diff options
author | Eric W. Biederman <ebiederm@xmission.com> | 2014-02-28 20:36:55 -0800 |
---|---|---|
committer | Eric Paris <eparis@redhat.com> | 2014-03-20 10:11:02 -0400 |
commit | 099dd235113700bbb476e572cd191ddb77b9af46 (patch) | |
tree | 7f8137af9685dbe6c2ddbd686feaf13808ab7d2c /include/linux/audit.h | |
parent | 638a0fd2a062568c568661be0a780be8e8836d03 (diff) | |
download | lwn-099dd235113700bbb476e572cd191ddb77b9af46.tar.gz lwn-099dd235113700bbb476e572cd191ddb77b9af46.zip |
audit: Send replies in the proper network namespace.
In perverse cases of file descriptor passing the current network
namespace of a process and the network namespace of a socket used by
that socket may differ. Therefore use the network namespace of the
appropiate socket to ensure replies always go to the appropiate
socket.
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Acked-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
Diffstat (limited to 'include/linux/audit.h')
-rw-r--r-- | include/linux/audit.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/include/linux/audit.h b/include/linux/audit.h index aa865a9a4c4f..ec1464df4c60 100644 --- a/include/linux/audit.h +++ b/include/linux/audit.h @@ -43,6 +43,7 @@ struct mq_attr; struct mqstat; struct audit_watch; struct audit_tree; +struct sk_buff; struct audit_krule { int vers_ops; @@ -463,7 +464,7 @@ extern int audit_filter_user(int type); extern int audit_filter_type(int type); extern int audit_rule_change(int type, __u32 portid, int seq, void *data, size_t datasz); -extern int audit_list_rules_send(__u32 portid, int seq); +extern int audit_list_rules_send(struct sk_buff *request_skb, int seq); extern u32 audit_enabled; #else /* CONFIG_AUDIT */ |