]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/commit - kernel/auditsc.c
audit: tie ANOM_ABEND records to syscall
authorRichard Guy Briggs <rgb@redhat.com>
Thu, 31 May 2018 20:28:12 +0000 (16:28 -0400)
committerPaul Moore <paul@paul-moore.com>
Tue, 19 Jun 2018 14:30:05 +0000 (10:30 -0400)
commitd87de4a878e110d0061fb22726d37a54a281285d
tree086268047aedb5765b6edd9eb9e88e3091fe76ad
parent9b8753fffe7b3642688135f28aa8a0a0f45fd9ab
audit: tie ANOM_ABEND records to syscall

Since core dump events are triggered by user activity, tie the
ANOM_ABEND record to the syscall record to collect all records from the
same event.

See: https://github.com/linux-audit/audit-kernel/issues/88

Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
kernel/auditsc.c