diff options
author | Eric Paris <eparis@redhat.com> | 2007-03-07 16:02:16 -0800 |
---|---|---|
committer | David S. Miller <davem@sunset.davemloft.net> | 2007-03-07 16:08:11 -0800 |
commit | 16bec31db751030171b31d7767fa3a5bdbe980ea (patch) | |
tree | 60b69d571ba42ef0bf9f54833bd10228220c87bd /net/ipv6 | |
parent | 215a2dd3b43e0dc425e81d21de9d961416b1dad4 (diff) |
[IPSEC]: xfrm audit hook misplaced in pfkey_delete and xfrm_del_sa
Inside pfkey_delete and xfrm_del_sa the audit hooks were not called if
there was any permission/security failures in attempting to do the del
operation (such as permission denied from security_xfrm_state_delete).
This patch moves the audit hook to the exit path such that all failures
(and successes) will actually get audited.
Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Venkat Yekkirala <vyekkirala@trustedcs.com>
Acked-by: James Morris <jmorris@namei.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv6')
0 files changed, 0 insertions, 0 deletions