audit: keep inode pinned
authorMiklos Szeredi <mszeredi@suse.cz>
Tue, 4 Nov 2014 10:27:12 +0000 (11:27 +0100)
committerPaul Moore <pmoore@redhat.com>
Tue, 11 Nov 2014 19:20:22 +0000 (14:20 -0500)
commit799b601451b21ebe7af0e6e8f6e2ccd4683c5064
tree407429e46a1b1c60fa55f20e3f1ec84658e48275
parent897f1acbb6702ddaa953e8d8436eee3b12016c7e
audit: keep inode pinned

Audit rules disappear when an inode they watch is evicted from the cache.
This is likely not what we want.

The guilty commit is "fsnotify: allow marks to not pin inodes in core",
which didn't take into account that audit_tree adds watches with a zero
mask.

Adding any mask should fix this.

Fixes: 90b1e7a57880 ("fsnotify: allow marks to not pin inodes in core")
Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
Cc: stable@vger.kernel.org # 2.6.36+
Signed-off-by: Paul Moore <pmoore@redhat.com>
kernel/audit_tree.c