]> git.baikalelectronics.ru Git - kernel.git/commit
audit: log the audit_names record type
authorJeff Layton <jlayton@redhat.com>
Wed, 8 May 2013 14:32:23 +0000 (10:32 -0400)
committerEric Paris <eparis@redhat.com>
Tue, 5 Nov 2013 16:09:04 +0000 (11:09 -0500)
commit6a54b1e0a7dcadafd134c60bf0a90a69d948afbd
tree59db7631075067f16c8d5f19286b7e075180b4be
parent23e1623a74221e4c5f5d6f5e1a0e153290dff8e9
audit: log the audit_names record type

...to make it clear what the intent behind each record's operation was.

In many cases you can infer this, based on the context of the syscall
and the result. In other cases it's not so obvious. For instance, in
the case where you have a file being renamed over another, you'll have
two different records with the same filename but different inode info.
By logging this information we can clearly tell which one was created
and which was deleted.

This fixes what was broken in commit 2cc35baf.
Commit 2ec68190 should also be backported to stable v3.7+.

Signed-off-by: Jeff Layton <jlayton@redhat.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
kernel/audit.c