audit: move audit_return_fixup before the filters
authorRichard Guy Briggs <rgb@redhat.com>
Thu, 25 Aug 2022 19:32:40 +0000 (15:32 -0400)
committerPaul Moore <paul@paul-moore.com>
Thu, 25 Aug 2022 21:25:08 +0000 (17:25 -0400)
commitd4fefa4801a1c2f9c0c7a48fbb0fdf384e89a4ab
treedb29bf24607042a9848cf9718f02d156fd2c7e3e
parentad982c3be4e60c7d39c03f782733503cbd88fd2a
audit: move audit_return_fixup before the filters

The success and return_code are needed by the filters.  Move
audit_return_fixup() before the filters.  This was causing syscall
auditing events to be missed.

Link: https://github.com/linux-audit/audit-kernel/issues/138
Cc: stable@vger.kernel.org
Fixes: 12c5e81d3fd0 ("audit: prepare audit_context for use in calling contexts beyond syscalls")
Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
[PM: manual merge required]
Signed-off-by: Paul Moore <paul@paul-moore.com>
kernel/auditsc.c