audit: Allow auditd to set pid to 0 to end auditing
authorSteve Grubb <sgrubb@redhat.com>
Tue, 17 Oct 2017 22:29:22 +0000 (18:29 -0400)
committerPaul Moore <paul@paul-moore.com>
Fri, 10 Nov 2017 21:08:36 +0000 (16:08 -0500)
commit33e8a907804428109ce1d12301c3365d619cc4df
tree071112d019bfaa1efc3e668e47af42f6079fc870
parent6e66ec3cae02952fcfc285cb156c11dcc61f4453
audit: Allow auditd to set pid to 0 to end auditing

The API to end auditing has historically been for auditd to set the
pid to 0. This patch restores that functionality.

See: https://github.com/linux-audit/audit-kernel/issues/69

Reviewed-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Steve Grubb <sgrubb@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
kernel/audit.c