[PATCH v2] auparse: apparmor fields
Steve Grubb
sgrubb at redhat.com
Tue Feb 28 23:15:48 UTC 2012
On Monday, February 20, 2012 09:17:06 AM Marcelo Cerri wrote:
> Just an update for the last patch. This patch contains a complete list of
> apparmor avc fields.
It needed #ifdef WITH_APPARMOR since its a compile time option. I added the
ifdef, you might want to make sure it still works. Applied.
-Steve
> Regards,
> Marcelo
> ---
> auparse/typetab.h | 7 +++++++#ifdef WITH_APPARMOR
> 1 files changed, 7 insertions(+), 0 deletions(-)
>
> diff --git a/auparse/typetab.h b/auparse/typetab.h
> index 7838c17..27c0ffb 100644
> --- a/auparse/typetab.h
> +++ b/auparse/typetab.h
> @@ -86,3 +86,10 @@ _S(AUPARSE_TYPE_NFPROTO, "family" )
> _S(AUPARSE_TYPE_ICMPTYPE, "icmptype" )
> _S(AUPARSE_TYPE_PROTOCOL, "proto" )
> _S(AUPARSE_TYPE_ADDR, "addr" )
> +_S(AUPARSE_TYPE_ESCAPED, "apparmor" )
> +_S(AUPARSE_TYPE_ESCAPED, "operation" )
> +_S(AUPARSE_TYPE_ESCAPED, "denied_mask" )
> +_S(AUPARSE_TYPE_ESCAPED, "info" )
> +_S(AUPARSE_TYPE_ESCAPED, "profile" )
> +_S(AUPARSE_TYPE_ESCAPED, "requested_mask")
> +
More information about the Linux-audit
mailing list