audit: allow checking the type of audit message in the user filter

Browse source

When userspace sends messages to the audit system it includes a type.
We want to be able to filter messages based on that type without have to
do the all or nothing option currently available on the
AUDIT_FILTER_TYPE filter list.  Instead we should be able to use the
AUDIT_FILTER_USER filter list and just use the message type as one part
of the matching decision.

Signed-off-by: Eric Paris <eparis@redhat.com>

...

This commit is contained in:

Eric Paris 2013-04-16 13:08:43 -04:00

parent 34c474de7b

commit 62062cf8a3

3 changed files with 27 additions and 5 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

include/linux/audit.h

View file

2

kernel/audit.c

View file

28

kernel/auditfilter.c

View file