From: David Woodhouse <dwmw2@shinybook.infradead.org>
Date: Thu, 23 Jun 2005 17:33:54 +0000 (+0100)
Subject: AUDIT: No really, we don't want to audit auditd.
X-Git-Tag: v2.6.16.28-rc1~3717^2~27
X-Git-Url: https://git.karo-electronics.de/?a=commitdiff_plain;h=9e94e66a5bc739ab525ec0a26ba75300aaf154f3;p=karo-tx-linux.git

AUDIT: No really, we don't want to audit auditd.

Signed-off-by: David Woodhouse <dwmw2@infradead.org>
---

diff --git a/kernel/auditsc.c b/kernel/auditsc.c
index f463fd230846..20c7d8560af0 100644
--- a/kernel/auditsc.c
+++ b/kernel/auditsc.c
@@ -573,7 +573,7 @@ static inline struct audit_context *audit_get_context(struct task_struct *tsk,
 	context->return_valid = return_valid;
 	context->return_code  = return_code;
 
-	if (context->in_syscall && !context->auditable) {
+	if (context->in_syscall && !context->auditable && tsk->pid != audit_pid) {
 		enum audit_state state;
 		state = audit_filter_syscall(tsk, context, &audit_filter_list[AUDIT_FILTER_EXIT]);
 		if (state == AUDIT_RECORD_CONTEXT)