[PATCH v3 3/5] quota: Don't issue audit messages on quota enforcing

[Jan Kara]

On Thu 02-07-26 11:33:21, cem at kernel.org wrote:
> From: Carlos Maiolino <cem at kernel.org>
> 
> Calling capable() to determine if we can bypass quota enforcement or not
> can trigger spurious audit messages. We don't really require it here so
> just use the capable_noaudit() version.
> 
> Signed-off-by: Carlos Maiolino <cmaiolino at redhat.com>
> Cc: Jan Kara <jack at suse.cz>
> Cc: Serge E. Hallyn <serge at hallyn.com>
> Cc: Dave Chinner <david at fromorbit.com>
> Cc: Eric Sandeen <sandeen at redhat.com>
> Cc: Dr. Thomas Orgis" <thomas.orgis at uni-hamburg.de>
> Cc: linux-xfs at vger.kernel.org
> Cc: linux-fsdevel at vger.kernel.org
> Cc: linux-security-module at vger.kernel.org
> Cc: linux-kernel at vger.kernel.org
> Reviewed-by: "Darrick J. Wong" <djwong at kernel.org>
> Reviewed-by: Christoph Hellwig <hch at lst.de>

Makes sense. Feel free to add:

Acked-by: Jan Kara <jack at suse.cz>

								Honza
> ---
>  fs/quota/dquot.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/fs/quota/dquot.c b/fs/quota/dquot.c
> index 9850de3955d3..dab93422a57b 100644
> --- a/fs/quota/dquot.c
> +++ b/fs/quota/dquot.c
> @@ -1308,7 +1308,7 @@ static int ignore_hardlimit(struct dquot *dquot)
>  {
>  	struct mem_dqinfo *info = &sb_dqopt(dquot->dq_sb)->info[dquot->dq_id.type];
>  
> -	return capable(CAP_SYS_RESOURCE) &&
> +	return capable_noaudit(CAP_SYS_RESOURCE) &&
>  	       (info->dqi_format->qf_fmt_id != QFMT_VFS_OLD ||
>  		!(info->dqi_flags & DQF_ROOT_SQUASH));
>  }
> -- 
> 2.54.0
> 
-- 
Jan Kara <jack at suse.com>
SUSE Labs, CR