]> git.baikalelectronics.ru Git - kernel.git/commit
audit: do not reject all AUDIT_INODE filter types
authorEric Paris <eparis@redhat.com>
Wed, 4 Sep 2013 19:01:43 +0000 (15:01 -0400)
committerEric Paris <eparis@redhat.com>
Tue, 5 Nov 2013 16:09:16 +0000 (11:09 -0500)
commitfc84270dc5d390b644f3b13a68cfce0bcff93efa
treebdbe6a4546fec7b142de93e59bb6ab628f746db3
parenteec142f15f3fdb2e3de5dfd85f1982fc736ca750
audit: do not reject all AUDIT_INODE filter types

commit 4702ca322a61d8c67de6dd30a111d969107260a5 tried to merge the
invalid filter checking into a single function.  However AUDIT_INODE
filters were not verified in the new generic checker.  Thus such rules
were being denied even though they were perfectly valid.

Ex:
$ auditctl -a exit,always -F arch=b64 -S open -F key=/foo -F inode=6955 -F devmajor=9 -F devminor=1
Error sending add rule data request (Invalid argument)

Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
kernel/auditfilter.c