While working on the audit by executable path feature, it was discovered that watches and parent references were slightly imbalanced and deeper than necessary.
Only bump up references when they are actually used and decrease when removed. Richard Guy Briggs (2): audit: eliminate unnecessary extra layer of watch references audit: eliminate unnecessary extra layer of watch parent references kernel/audit_watch.c | 11 ++++------- kernel/auditfilter.c | 9 --------- 2 files changed, 4 insertions(+), 16 deletions(-) -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit
