[PATCH v3 3/5] quota: Don't issue audit messages on quota enforcing

[cem at kernel.org]

From: Carlos Maiolino <cem at kernel.org>

Calling capable() to determine if we can bypass quota enforcement or not
can trigger spurious audit messages. We don't really require it here so
just use the capable_noaudit() version.

Signed-off-by: Carlos Maiolino <cmaiolino at redhat.com>
Cc: Jan Kara <jack at suse.cz>
Cc: Serge E. Hallyn <serge at hallyn.com>
Cc: Dave Chinner <david at fromorbit.com>
Cc: Eric Sandeen <sandeen at redhat.com>
Cc: Dr. Thomas Orgis" <thomas.orgis at uni-hamburg.de>
Cc: linux-xfs at vger.kernel.org
Cc: linux-fsdevel at vger.kernel.org
Cc: linux-security-module at vger.kernel.org
Cc: linux-kernel at vger.kernel.org
Reviewed-by: "Darrick J. Wong" <djwong at kernel.org>
Reviewed-by: Christoph Hellwig <hch at lst.de>
---
 fs/quota/dquot.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fs/quota/dquot.c b/fs/quota/dquot.c
index 9850de3955d3..dab93422a57b 100644
--- a/fs/quota/dquot.c
+++ b/fs/quota/dquot.c
@@ -1308,7 +1308,7 @@ static int ignore_hardlimit(struct dquot *dquot)
 {
 	struct mem_dqinfo *info = &sb_dqopt(dquot->dq_sb)->info[dquot->dq_id.type];
 
-	return capable(CAP_SYS_RESOURCE) &&
+	return capable_noaudit(CAP_SYS_RESOURCE) &&
 	       (info->dqi_format->qf_fmt_id != QFMT_VFS_OLD ||
 		!(info->dqi_flags & DQF_ROOT_SQUASH));
 }
-- 
2.54.0