On Fri, Oct 11, 2024 at 05:34:21PM -0400, Paul Moore wrote: > On Thu, Oct 10, 2024 at 11:26 AM Mickaël Salaün <[email protected]> wrote: > > > > Use the new inode_get_ino() helper to log the user space's view of > > inode's numbers instead of the private kernel values. > > > > Cc: Paul Moore <[email protected]> > > Cc: Eric Paris <[email protected]> > > Signed-off-by: Mickaël Salaün <[email protected]> > > --- > > security/lsm_audit.c | 10 +++++----- > > 1 file changed, 5 insertions(+), 5 deletions(-) > > While answering some off-list questions regarding audit, I realized > we've got similar issues with audit_name->ino and audit_watch->ino. > It would be nice if you could also fix that in this patchset.
I can do that with the next version, but I'm wondering how it would fit with the UAPI's struct audit_rule_data which has only 32-bit fields/values. Does 64-bit inode filtering currently work?
