]> git.baikalelectronics.ru Git - kernel.git/commit
audit: normalize MAC_POLICY_LOAD record
authorRichard Guy Briggs <rgb@redhat.com>
Mon, 9 Apr 2018 23:36:31 +0000 (19:36 -0400)
committerPaul Moore <paul@paul-moore.com>
Tue, 17 Apr 2018 21:54:11 +0000 (17:54 -0400)
commit69277d4d27f9ea1e0cc493e43c0e684ab97ff7f4
treefecf3a36d80b9f685758d6ed03ca286accc38351
parentb91d0de0219a951ff957fea467c98f87272d3cc0
audit: normalize MAC_POLICY_LOAD record

The audit MAC_POLICY_LOAD record had redundant dangling keywords and was
missing information about which LSM was responsible and its completion
status.  While this record is only issued on success, the parser expects
the res= field to be present.

Old record:
type=MAC_POLICY_LOAD msg=audit(1479299795.404:43): policy loaded auid=0 ses=1

Delete the redundant dangling keywords, add the lsm= field and the res=
field.

New record:
type=MAC_POLICY_LOAD msg=audit(1523293846.204:894): auid=0 ses=1 lsm=selinux res=1

See: https://github.com/linux-audit/audit-kernel/issues/47

Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/selinuxfs.c