[PATCH] Fix formatting of AUDIT_CONFIG_CHANGE events
Paul Moore
paul at paul-moore.com
Sun Nov 20 20:42:36 UTC 2016
On Wed, Nov 16, 2016 at 4:14 PM, Steve Grubb <sgrubb at redhat.com> wrote:
> The AUDIT_CONFIG_CHANGE events sometimes use a op= field. The current code
> logs the value of the field with quotes. This field is documented to not be
> encoded, so it should not have quotes.
>
> Signed-off-by: Steve Grubb <sgrubb at redhat.com>
Looks good to me, merged.
--
paul moore
www.paul-moore.com
More information about the Linux-audit
mailing list