Paul Moore 173743dd99 audit: ensure that 'audit=1' actually enables audit for PID 1
Prior to this patch we enabled audit in audit_init(), which is too
late for PID 1 as the standard initcalls are run after the PID 1 task
is forked.  This means that we never allocate an audit_context (see
audit_alloc()) for PID 1 and therefore miss a lot of audit events
generated by PID 1.

This patch enables audit as early as possible to help ensure that when
PID 1 is forked it can allocate an audit_context if required.

Reviewed-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
2017-11-10 16:07:39 -05:00
..
2017-05-12 15:57:15 -07:00
2017-08-27 13:55:12 -07:00
2017-05-23 10:01:37 +02:00
2017-08-16 16:48:34 -07:00
2017-06-12 18:07:43 -04:00
2017-09-05 09:46:59 -04:00
2017-01-12 07:01:56 -07:00
2017-05-18 10:30:19 -06:00
2017-05-08 17:15:12 -07:00
2017-08-18 15:32:01 -07:00
2017-07-12 17:22:01 -07:00
2017-08-21 12:47:31 -07:00
2016-12-22 22:58:37 -05:00
2017-07-12 09:15:00 -07:00