Hello steve,
the log which type is MAC_IPSEC_EVENT, MAC_UNLBL_STCADD or MAC_UNLBL_STCDEL,
aureport cannot report it.
Signed-off-by: Peng Haitao <[EMAIL PROTECTED]>
---
src/aureport-scan.c | 8 ++++----
1 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/src/aureport-scan.c b/src/aureport-scan.c
index 0d880b0..7803430 100644
--- a/src/aureport-scan.c
+++ b/src/aureport-scan.c
@@ -447,7 +447,7 @@ static int per_event_detailed(llist *l)
if (report_detail == D_DETAILED) {
if (list_find_msg_range(l,
AUDIT_MAC_POLICY_LOAD,
- AUDIT_MAC_IPSEC_DELSPD)) {
+ AUDIT_MAC_UNLBL_STCDEL)) {
print_per_event_item(l);
rc = 1;
} else {
@@ -472,7 +472,7 @@ static int per_event_detailed(llist *l)
rc = 1;
} else if (list_find_msg_range(l,
AUDIT_MAC_POLICY_LOAD,
- AUDIT_MAC_IPSEC_DELSPD)) {
+ AUDIT_MAC_UNLBL_STCDEL)) {
print_per_event_item(l);
rc = 1;
}
@@ -684,7 +684,7 @@ static void do_summary_total(llist *l)
sd.changes++;
list_first(l);
if (list_find_msg_range(l, AUDIT_MAC_POLICY_LOAD,
- AUDIT_MAC_IPSEC_DELSPD))
+ AUDIT_MAC_UNLBL_STCDEL))
sd.changes++;
// add acct changes
@@ -774,7 +774,7 @@ static void do_summary_total(llist *l)
// MAC
list_first(l);
if (list_find_msg_range(l, AUDIT_MAC_POLICY_LOAD,
- AUDIT_MAC_IPSEC_DELSPD))
+ AUDIT_MAC_UNLBL_STCDEL))
sd.mac++;
if (list_find_msg_range(l, AUDIT_FIRST_USER_LSPP_MSG,
AUDIT_LAST_USER_LSPP_MSG))
--
1.5.3
--
Regards
Peng Haitao
--
Linux-audit mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/linux-audit
