diff options
| author | Eric Paris <eparis@redhat.com> | 2013-04-16 13:08:43 -0400 |
|---|---|---|
| committer | Eric Paris <eparis@redhat.com> | 2013-04-16 17:28:49 -0400 |
| commit | 62062cf8a3a99a933efdac549da380f230dbe982 (patch) | |
| tree | 8da676d774d02c3c8f0093e7f2586719072f522f /kernel/audit.c | |
| parent | 34c474de7b4bd451396d67647ac728b0433379a9 (diff) | |
audit: allow checking the type of audit message in the user filter
When userspace sends messages to the audit system it includes a type.
We want to be able to filter messages based on that type without have to
do the all or nothing option currently available on the
AUDIT_FILTER_TYPE filter list. Instead we should be able to use the
AUDIT_FILTER_USER filter list and just use the message type as one part
of the matching decision.
Signed-off-by: Eric Paris <eparis@redhat.com>
Diffstat (limited to 'kernel/audit.c')
| -rw-r--r-- | kernel/audit.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/kernel/audit.c b/kernel/audit.c index c45e6d2809d..132271448b8 100644 --- a/kernel/audit.c +++ b/kernel/audit.c @@ -737,7 +737,7 @@ static int audit_receive_msg(struct sk_buff *skb, struct nlmsghdr *nlh) if (!audit_enabled && msg_type != AUDIT_USER_AVC) return 0; - err = audit_filter_user(); + err = audit_filter_user(msg_type); if (err == 1) { err = 0; if (msg_type == AUDIT_USER_TTY) { |