diff options
| author | Robert Watson <rwatson@FreeBSD.org> | 2009-01-06 13:59:59 +0000 |
|---|---|---|
| committer | Robert Watson <rwatson@FreeBSD.org> | 2009-01-06 13:59:59 +0000 |
| commit | cd6bbe656ee5ea750f52e74f3732e80b1bbbfb5f (patch) | |
| tree | 9aee79899f1b774267d8b48a8b1bf531aa968dfc /sys/security | |
| parent | bbb0e3d9d5b5534a72ecda24838a519a7e6373e8 (diff) | |
Notes
Diffstat (limited to 'sys/security')
| -rw-r--r-- | sys/security/audit/audit.h | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/sys/security/audit/audit.h b/sys/security/audit/audit.h index 14dbcfd0ced2..227d2dce3368 100644 --- a/sys/security/audit/audit.h +++ b/sys/security/audit/audit.h @@ -198,11 +198,11 @@ void audit_thread_free(struct thread *td); /* * Wrap the audit_syscall_exit() function so that it is called only when - * auditing is enabled, or we have a audit record on the thread. It is - * possible that an audit record was begun before auditing was turned off. + * we have a audit record on the thread. Audit records can persist after + * auditing is disabled, so we don't just check audit_enabled here. */ #define AUDIT_SYSCALL_EXIT(error, td) do { \ - if (audit_enabled || (td->td_ar != NULL)) \ + if (td->td_ar != NULL) \ audit_syscall_exit(error, td); \ } while (0) |