tree 407429e46a1b1c60fa55f20e3f1ec84658e48275
parent 897f1acbb6702ddaa953e8d8436eee3b12016c7e
author Miklos Szeredi <mszeredi@suse.cz> 1415096832 +0100
committer Paul Moore <pmoore@redhat.com> 1415733622 -0500

audit: keep inode pinned

Audit rules disappear when an inode they watch is evicted from the cache.
This is likely not what we want.

The guilty commit is "fsnotify: allow marks to not pin inodes in core",
which didn't take into account that audit_tree adds watches with a zero
mask.

Adding any mask should fix this.

Fixes: 90b1e7a57880 ("fsnotify: allow marks to not pin inodes in core")
Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
Cc: stable@vger.kernel.org # 2.6.36+
Signed-off-by: Paul Moore <pmoore@redhat.com>