Signed-off-by: Richard Guy Briggs <[email protected]>
---
trunk/lib/libaudit.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/trunk/lib/libaudit.c b/trunk/lib/libaudit.c
index 70b8ea8..566b89e 100644
--- a/trunk/lib/libaudit.c
+++ b/trunk/lib/libaudit.c
@@ -1345,6 +1345,7 @@ int audit_rule_fieldpair_data(struct audit_rule_data
**rulep, const char *pair,
int vlen;
int offset;
struct audit_rule_data *rule = *rulep;
+ uint32_t features = audit_get_features();
if (f == NULL)
return -1;
@@ -1508,7 +1509,6 @@ int audit_rule_fieldpair_data(struct audit_rule_data
**rulep, const char *pair,
case AUDIT_FILTERKEY:
case AUDIT_EXE:
if (field == AUDIT_EXE) {
- uint32_t features = audit_get_features();
if ((features &
AUDIT_FEATURE_BITMAP_EXECUTABLE_PATH) == 0)
return -30;
if (op != AUDIT_EQUAL)
--
1.7.1
--
Linux-audit mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/linux-audit