diff options
author | Eric W. Biederman <ebiederm@xmission.com> | 2014-02-28 19:44:55 -0800 |
---|---|---|
committer | Eric W. Biederman <ebiederm@xmission.com> | 2014-02-28 19:44:55 -0800 |
commit | 6f285b19d09f72e801525f5eea1bdad22e559bf0 (patch) | |
tree | ece90969f72ebf9b06b0386762b35cb20e415dd4 /include | |
parent | 48095d991d85687569ac025b18a6c7ae1632c9f7 (diff) | |
download | op-kernel-dev-6f285b19d09f72e801525f5eea1bdad22e559bf0.zip op-kernel-dev-6f285b19d09f72e801525f5eea1bdad22e559bf0.tar.gz |
audit: Send replies in the proper network namespace.
In perverse cases of file descriptor passing the current network
namespace of a process and the network namespace of a socket used by
that socket may differ. Therefore use the network namespace of the
appropiate socket to ensure replies always go to the appropiate
socket.
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Diffstat (limited to 'include')
-rw-r--r-- | include/linux/audit.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/include/linux/audit.h b/include/linux/audit.h index aa865a9..ec1464d 100644 --- a/include/linux/audit.h +++ b/include/linux/audit.h @@ -43,6 +43,7 @@ struct mq_attr; struct mqstat; struct audit_watch; struct audit_tree; +struct sk_buff; struct audit_krule { int vers_ops; @@ -463,7 +464,7 @@ extern int audit_filter_user(int type); extern int audit_filter_type(int type); extern int audit_rule_change(int type, __u32 portid, int seq, void *data, size_t datasz); -extern int audit_list_rules_send(__u32 portid, int seq); +extern int audit_list_rules_send(struct sk_buff *request_skb, int seq); extern u32 audit_enabled; #else /* CONFIG_AUDIT */ |