[PATCH] Fix formatting of AUDIT_CONFIG_CHANGE events

Paul Moore paul at paul-moore.com
Sun Nov 20 20:42:36 UTC 2016


On Wed, Nov 16, 2016 at 4:14 PM, Steve Grubb <sgrubb at redhat.com> wrote:
> The AUDIT_CONFIG_CHANGE events sometimes use a op= field. The current code
> logs the value of the field with quotes. This field is documented to not be
> encoded, so it should not have quotes.
>
> Signed-off-by: Steve Grubb <sgrubb at redhat.com>

Looks good to me, merged.

-- 
paul moore
www.paul-moore.com




More information about the Linux-audit mailing list