diff options
Diffstat (limited to 'kernel/auditsc.c')
-rw-r--r-- | kernel/auditsc.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/kernel/auditsc.c b/kernel/auditsc.c index 1b7c91f9d5ff..773d28a3f701 100644 --- a/kernel/auditsc.c +++ b/kernel/auditsc.c | |||
@@ -444,7 +444,7 @@ static enum audit_state audit_filter_task(struct task_struct *tsk) | |||
444 | 444 | ||
445 | /* At syscall entry and exit time, this filter is called if the | 445 | /* At syscall entry and exit time, this filter is called if the |
446 | * audit_state is not low enough that auditing cannot take place, but is | 446 | * audit_state is not low enough that auditing cannot take place, but is |
447 | * also not high enough that we already know we have to write and audit | 447 | * also not high enough that we already know we have to write an audit |
448 | * record (i.e., the state is AUDIT_SETUP_CONTEXT or AUDIT_BUILD_CONTEXT). | 448 | * record (i.e., the state is AUDIT_SETUP_CONTEXT or AUDIT_BUILD_CONTEXT). |
449 | */ | 449 | */ |
450 | static enum audit_state audit_filter_syscall(struct task_struct *tsk, | 450 | static enum audit_state audit_filter_syscall(struct task_struct *tsk, |
@@ -750,7 +750,7 @@ void audit_free(struct task_struct *tsk) | |||
750 | /* Compute a serial number for the audit record. Audit records are | 750 | /* Compute a serial number for the audit record. Audit records are |
751 | * written to user-space as soon as they are generated, so a complete | 751 | * written to user-space as soon as they are generated, so a complete |
752 | * audit record may be written in several pieces. The timestamp of the | 752 | * audit record may be written in several pieces. The timestamp of the |
753 | * record and this serial number are used by the user-space daemon to | 753 | * record and this serial number are used by the user-space tools to |
754 | * determine which pieces belong to the same audit record. The | 754 | * determine which pieces belong to the same audit record. The |
755 | * (timestamp,serial) tuple is unique for each syscall and is live from | 755 | * (timestamp,serial) tuple is unique for each syscall and is live from |
756 | * syscall entry to syscall exit. | 756 | * syscall entry to syscall exit. |