Commit efef73a1 authored Feb 23, 2015 by Richard Guy Briggs Committed by Paul Moore Feb 23, 2015

audit: don't reset working wait time accidentally with auditd

During a queue overflow condition while we are waiting for auditd to drain the
queue to make room for regular messages, we don't want a successful auditd that
has bypassed the queue check to reset the backlog wait time.

Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Paul Moore <pmoore@redhat.com>

parent a77ed4e5

kernel/audit.c

+2 −1

Original line number	Diff line number	Diff line
		@@ -1395,6 +1395,7 @@ struct audit_buffer audit_log_start(struct audit_context ctx, gfp_t gfp_mask,
		return NULL;
		}

		if (!reserve)
		audit_backlog_wait_time = audit_backlog_wait_time_master;

		ab = audit_buffer_alloc(ctx, gfp_mask, type);