Audit record key,value pairs must have a space delimiter.
This fix applies to lspp.b19 commit
3ee74f8797418a46e40976f1f1c2bcd23ded95bf
"log more info for directory entry change events"
Signed-off-by: Amy Griffis <[EMAIL PROTECTED]>
---
kernel/auditsc.c | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/kernel/auditsc.c b/kernel/auditsc.c
index a2ad392..1c43dba 100644
--- a/kernel/auditsc.c
+++ b/kernel/auditsc.c
@@ -869,7 +869,7 @@ static void audit_log_exit(struct audit_
case 0:
/* name was specified as a relative path and the
* directory component is the cwd */
- audit_log_d_path(ab, "name=", context->pwd,
+ audit_log_d_path(ab, " name=", context->pwd,
context->pwdmnt);
break;
default:
@@ -879,7 +879,7 @@ static void audit_log_exit(struct audit_
n->name);
}
} else
- audit_log_format(ab, "name=(null)");
+ audit_log_format(ab, " name=(null)");
if (n->ino != (unsigned long)-1) {
audit_log_format(ab, " inode=%lu"
--
1.4.0
--
Linux-audit mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/linux-audit
