aboutsummaryrefslogtreecommitdiffstats
path: root/kernel/auditsc.c
diff options
context:
space:
mode:
Diffstat (limited to 'kernel/auditsc.c')
-rw-r--r--kernel/auditsc.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/kernel/auditsc.c b/kernel/auditsc.c
index 1b7c91f9d5ff..773d28a3f701 100644
--- a/kernel/auditsc.c
+++ b/kernel/auditsc.c
@@ -444,7 +444,7 @@ static enum audit_state audit_filter_task(struct task_struct *tsk)
444 444
445/* At syscall entry and exit time, this filter is called if the 445/* At syscall entry and exit time, this filter is called if the
446 * audit_state is not low enough that auditing cannot take place, but is 446 * audit_state is not low enough that auditing cannot take place, but is
447 * also not high enough that we already know we have to write and audit 447 * also not high enough that we already know we have to write an audit
448 * record (i.e., the state is AUDIT_SETUP_CONTEXT or AUDIT_BUILD_CONTEXT). 448 * record (i.e., the state is AUDIT_SETUP_CONTEXT or AUDIT_BUILD_CONTEXT).
449 */ 449 */
450static enum audit_state audit_filter_syscall(struct task_struct *tsk, 450static enum audit_state audit_filter_syscall(struct task_struct *tsk,
@@ -750,7 +750,7 @@ void audit_free(struct task_struct *tsk)
750/* Compute a serial number for the audit record. Audit records are 750/* Compute a serial number for the audit record. Audit records are
751 * written to user-space as soon as they are generated, so a complete 751 * written to user-space as soon as they are generated, so a complete
752 * audit record may be written in several pieces. The timestamp of the 752 * audit record may be written in several pieces. The timestamp of the
753 * record and this serial number are used by the user-space daemon to 753 * record and this serial number are used by the user-space tools to
754 * determine which pieces belong to the same audit record. The 754 * determine which pieces belong to the same audit record. The
755 * (timestamp,serial) tuple is unique for each syscall and is live from 755 * (timestamp,serial) tuple is unique for each syscall and is live from
756 * syscall entry to syscall exit. 756 * syscall entry to syscall exit.