On Thursday 26 May 2005 13:23, David Woodhouse wrote:
@@ -778,10 +784,18 @@ static void audit_log_exit(struct audit_
audit_log_end(ab);
}
+ if (context->pwd && context->pwdmnt) {
+ ab = audit_log_start(context, AUDIT_CWD);
+ if (ab) {
+ audit_log_d_path(ab, "cwd=", context->pwd,
context->pwdmnt);
+ audit_log_end(ab);
+ }
+ }
Shouldn't this be untrusted?
-Steve