On Thursday 26 May 2005 13:23, David Woodhouse wrote:
 @@ -778,10 +784,18 @@ static void audit_log_exit(struct audit_
                 audit_log_end(ab);
         }
  
 +       if (context->pwd && context->pwdmnt) {
 +               ab = audit_log_start(context, AUDIT_CWD);
 +               if (ab) {
 +                       audit_log_d_path(ab, "cwd=", context->pwd,
 context->pwdmnt); 
 +                       audit_log_end(ab); 
 +               }
 +       } 
Shouldn't this be untrusted?
-Steve