Re: [PATCH 5/6 RFC] netfilter: add audit operation field

2017-06-02 Thread Paul Moore
On Thu, May 18, 2017 at 1:21 PM, Richard Guy Briggs wrote: > Add the operation performed (register or replace) to the NETFILTER_CFG and > NETFILTER_CFGSOLO records. > > Here are sample records for accompanied: > type=NETFILTER_CFG msg=audit(1494981627.248:9764): op=replace

[PATCH 5/6 RFC] netfilter: add audit operation field

2017-05-18 Thread Richard Guy Briggs
Add the operation performed (register or replace) to the NETFILTER_CFG and NETFILTER_CFGSOLO records. Here are sample records for accompanied: type=NETFILTER_CFG msg=audit(1494981627.248:9764): op=replace family=7 table=broute entries=0 and unaccompanied cases: type=UNKNOWN[1331]