[GIT PULL] Audit patches for 4.6

[GIT PULL] Audit patches for 4.6

[Paul Moore]

Hi Linus,

A small set of patches for audit this time; just three in total and one is a 
spelling fix.  The two patches with actual content are designed to help 
prevent new instances of auditd from displacing an existing, functioning 
auditd and to generate a log of the attempt.  Not to worry, dead/stuck auditd 
instances can still be replaced by a new instance without problem.

Nothing controversial, and everything passes our regression suite; please pull 
for Linux 4.6.

Thanks,
-Paul

---
The following changes since commit cb74ed278f8054fddf79ed930495b9e214f7c7b2:

  audit: always enable syscall auditing when supported and audit is enabled
         (2016-01-13 09:18:55 -0500)

are available in the git repository at:

  git://git.infradead.org/users/pcmoore/audit stable-4.6

for you to fetch changes up to fd97646b05957348e01be3d9de5c3d979b25c819:

  audit: Fix typo in comment (2016-02-08 11:25:39 -0500)

----------------------------------------------------------------
Richard Guy Briggs (2):
      audit: stop an old auditd being starved out by a new auditd
      audit: log failed attempts to change audit_pid configuration

Wei Yuan (1):
      audit: Fix typo in comment

 include/uapi/linux/audit.h |  1 +
 kernel/audit.c             | 20 +++++++++++++++++++-
 kernel/audit_watch.c       |  2 +-
 kernel/auditfilter.c       |  6 +++---
 4 files changed, 24 insertions(+), 5 deletions(-)

-- 
paul moore
security @ redhat