audit: convert PPIDs to the inital PID namespace.
[firefly-linux-kernel-4.4.55.git] / kernel / auditsc.c
index 57bf178ca7d58dfa90facaa48f4d77b983014df4..a6cf7ab56e61ebbe340328b575792c84f9fc8f65 100644 (file)
@@ -465,7 +465,7 @@ static int audit_filter_rules(struct task_struct *tsk,
                case AUDIT_PPID:
                        if (ctx) {
                                if (!ctx->ppid)
-                                       ctx->ppid = sys_getppid();
+                                       ctx->ppid = task_ppid_nr(tsk);
                                result = audit_comparator(ctx->ppid, f->op, f->val);
                        }
                        break;