On Tue, Jul 17, 2018 at 8:58 PM, Paul Moore <paul(a)paul-moore.com> wrote:
Commit c72051d5778a ("audit: use ktime_get_coarse_ts64() for
time
access") converted audit's use of current_kernel_time64() to the
new ktime_get_coarse_ts64() function. Unfortunately this resulted
in incorrect timestamps, e.g. events stamped with the year 1969
despite it being 2018. This patch corrects this by using
ktime_get_coarse_real_ts64() just like the current_kernel_time64()
wrapper.
Fixes: c72051d5778a ("audit: use ktime_get_coarse_ts64() for time access")
Signed-off-by: Paul Moore <paul(a)paul-moore.com>
Sorry about my mistake, I clearly intended to use the 'real' accessors
here, but ended up with a typo after many other calls got converted
to the monotonic version on purpose.
Reviewed-by: Arnd Bergmann <arnd(a)arndb.de>