[PATCH] field-dictionary: add ioctlcmd
Paul Moore
paul at paul-moore.com
Sun Jul 17 13:19:34 UTC 2016
On Fri, Jul 15, 2016 at 3:55 PM, <william.c.roberts at intel.com> wrote:
> From: William Roberts <william.c.roberts at intel.com>
>
> Per-request ioctlcmd controls were added to SE Linux, however
> the audit field dictionary was not updated.
>
> This patch updates that dictionary.
>
> Signed-off-by: William Roberts <william.c.roberts at intel.com>
> ---
> specs/fields/field-dictionary.csv | 1 +
> 1 file changed, 1 insertion(+)
Applied, thanks!
> diff --git a/specs/fields/field-dictionary.csv b/specs/fields/field-dictionary.csv
> index a645085..5a922e5 100644
> --- a/specs/fields/field-dictionary.csv
> +++ b/specs/fields/field-dictionary.csv
> @@ -82,6 +82,7 @@ inode,numeric,inode number,
> inode_gid,numeric,group id of the inode's owner,
> inode_uid,numeric,user id of the inode's owner,
> invalid_context,encoded,SELinux context,
> +ioctlcmd,numeric,The request argument to the ioctl syscall,
> ipx-net,numeric,IPX network number,
> item,numeric,which item is being recorded,
> items,numeric,the number of path records in the event,
> --
> 1.9.1
--
paul moore
www.paul-moore.com
More information about the Linux-audit
mailing list