On Tue, Jul 17, 2018 at 8:58 PM, Paul Moore <p...@paul-moore.com> wrote:
> Commit c72051d5778a ("audit: use ktime_get_coarse_ts64() for time
> access") converted audit's use of current_kernel_time64() to the
> new ktime_get_coarse_ts64() function. Unfortunately this resulted
> in incorrect timestamps, e.g. events stamped with the year 1969
> despite it being 2018. This patch corrects this by using
> ktime_get_coarse_real_ts64() just like the current_kernel_time64()
> wrapper.
>
> Fixes: c72051d5778a ("audit: use ktime_get_coarse_ts64() for time access")
> Signed-off-by: Paul Moore <p...@paul-moore.com>
Sorry about my mistake, I clearly intended to use the 'real' accessors
here, but ended up with a typo after many other calls got converted
to the monotonic version on purpose.
Reviewed-by: Arnd Bergmann <a...@arndb.de>
--
Linux-audit mailing list
Linux-audit@redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit
