tree 60b69d571ba42ef0bf9f54833bd10228220c87bd
parent 215a2dd3b43e0dc425e81d21de9d961416b1dad4
author Eric Paris <eparis@redhat.com> 1173312136 -0800
committer David S. Miller <davem@sunset.davemloft.net> 1173312491 -0800

[IPSEC]: xfrm audit hook misplaced in pfkey_delete and xfrm_del_sa

Inside pfkey_delete and xfrm_del_sa the audit hooks were not called if
there was any permission/security failures in attempting to do the del
operation (such as permission denied from security_xfrm_state_delete).
This patch moves the audit hook to the exit path such that all failures
(and successes) will actually get audited.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Venkat Yekkirala <vyekkirala@trustedcs.com>
Acked-by: James Morris <jmorris@namei.org>
Signed-off-by: David S. Miller <davem@davemloft.net>