AUDIT: Drop user-generated messages immediately while auditing disabled.
Signed-off-by: David Woodhouse <dwmw2@infradead.org>
This commit is contained in:
parent
df5179854b
commit
d6e0e1585a
@ -437,7 +437,7 @@ static int audit_receive_msg(struct sk_buff *skb, struct nlmsghdr *nlh)
|
||||
if (!tsk)
|
||||
return -ESRCH;
|
||||
|
||||
if (audit_filter_user(tsk, msg_type)) {
|
||||
if (audit_enabled && audit_filter_user(tsk, msg_type)) {
|
||||
ab = audit_log_start(NULL, msg_type);
|
||||
if (ab) {
|
||||
audit_log_format(ab,
|
||||
|
Loading…
Reference in New Issue
Block a user