From: William Roberts <[email protected]> Per-request ioctlcmd controls were added to SE Linux, however the audit field dictionary was not updated.
This patch updates that dictionary. Signed-off-by: William Roberts <[email protected]> --- specs/fields/field-dictionary.csv | 1 + 1 file changed, 1 insertion(+) diff --git a/specs/fields/field-dictionary.csv b/specs/fields/field-dictionary.csv index a645085..5a922e5 100644 --- a/specs/fields/field-dictionary.csv +++ b/specs/fields/field-dictionary.csv @@ -82,6 +82,7 @@ inode,numeric,inode number, inode_gid,numeric,group id of the inode's owner, inode_uid,numeric,user id of the inode's owner, invalid_context,encoded,SELinux context, +ioctlcmd,numeric,The request argument to the ioctl syscall, ipx-net,numeric,IPX network number, item,numeric,which item is being recorded, items,numeric,the number of path records in the event, -- 1.9.1 -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
