[PATCH v2] auparse: apparmor fields

Steve Grubb sgrubb at redhat.com
Tue Feb 28 23:15:48 UTC 2012


On Monday, February 20, 2012 09:17:06 AM Marcelo Cerri wrote:
> Just an update for the last patch. This patch contains a complete list of
> apparmor avc fields.

It needed #ifdef WITH_APPARMOR since its a compile time option. I added the 
ifdef, you might want to make sure it still works.  Applied.

-Steve

> Regards,
> Marcelo
> ---
>  auparse/typetab.h |    7 +++++++#ifdef WITH_APPARMOR
>  1 files changed, 7 insertions(+), 0 deletions(-)
> 
> diff --git a/auparse/typetab.h b/auparse/typetab.h
> index 7838c17..27c0ffb 100644
> --- a/auparse/typetab.h
> +++ b/auparse/typetab.h
> @@ -86,3 +86,10 @@ _S(AUPARSE_TYPE_NFPROTO,	"family"	)
>  _S(AUPARSE_TYPE_ICMPTYPE,	"icmptype"	)
>  _S(AUPARSE_TYPE_PROTOCOL,	"proto"		)
>  _S(AUPARSE_TYPE_ADDR,		"addr"		)
> +_S(AUPARSE_TYPE_ESCAPED,	"apparmor"	)
> +_S(AUPARSE_TYPE_ESCAPED,	"operation"	)
> +_S(AUPARSE_TYPE_ESCAPED,	"denied_mask"	)
> +_S(AUPARSE_TYPE_ESCAPED,	"info"		)
> +_S(AUPARSE_TYPE_ESCAPED,	"profile"	)
> +_S(AUPARSE_TYPE_ESCAPED,	"requested_mask")
> +




More information about the Linux-audit mailing list