|
@@ -1656,8 +1656,14 @@ syscall_trace_leave (long arg0, long arg1, long arg2, long arg3,
|
|
long arg4, long arg5, long arg6, long arg7,
|
|
long arg4, long arg5, long arg6, long arg7,
|
|
struct pt_regs regs)
|
|
struct pt_regs regs)
|
|
{
|
|
{
|
|
- if (unlikely(current->audit_context))
|
|
|
|
- audit_syscall_exit(current, AUDITSC_RESULT(regs.r10), regs.r8);
|
|
|
|
|
|
+ if (unlikely(current->audit_context)) {
|
|
|
|
+ int success = AUDITSC_RESULT(regs.r10);
|
|
|
|
+ long result = regs.r8;
|
|
|
|
+
|
|
|
|
+ if (success != AUDITSC_SUCCESS)
|
|
|
|
+ result = -result;
|
|
|
|
+ audit_syscall_exit(current, success, result);
|
|
|
|
+ }
|
|
|
|
|
|
if (test_thread_flag(TIF_SYSCALL_TRACE)
|
|
if (test_thread_flag(TIF_SYSCALL_TRACE)
|
|
&& (current->ptrace & PT_PTRACED))
|
|
&& (current->ptrace & PT_PTRACED))
|