summary refs log tree commit diff
path: root/kernel/audit_tree.c
diff options
context:
space:
mode:
authorBurn Alting <burn@swtf.dyndns.org>2014-04-04 16:00:38 +1100
committerEric Paris <eparis@redhat.com>2014-09-23 16:37:53 -0400
commite7df61f4d1ddb7fdd654dde6cd40f7cc398c3932 (patch)
treeadd425cf72c2343e32a10e8a0c0e2ce22affe668 /kernel/audit_tree.c
parent01478d7d60f654419ba863856cad0446bcb73a59 (diff)
downloadlinux-e7df61f4d1ddb7fdd654dde6cd40f7cc398c3932.tar.gz
audit: invalid op= values for rules
Various audit events dealing with adding, removing and updating rules result in
invalid values set for the op keys which result in embedded spaces in op=
values.

The invalid values are
        op="add rule"       set in kernel/auditfilter.c
        op="remove rule"    set in kernel/auditfilter.c
        op="remove rule"    set in kernel/audit_tree.c
        op="updated rules"  set in kernel/audit_watch.c
        op="remove rule"    set in kernel/audit_watch.c

Replace the space in the above values with an underscore character ('_').

Coded-by: Burn Alting <burn@swtf.dyndns.org>
Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Diffstat (limited to 'kernel/audit_tree.c')
-rw-r--r--kernel/audit_tree.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/kernel/audit_tree.c b/kernel/audit_tree.c
index 135944a7b28a..bd418c486e9a 100644
--- a/kernel/audit_tree.c
+++ b/kernel/audit_tree.c
@@ -457,7 +457,7 @@ static void audit_log_remove_rule(struct audit_krule *rule)
 	if (unlikely(!ab))
 		return;
 	audit_log_format(ab, "op=");
-	audit_log_string(ab, "remove rule");
+	audit_log_string(ab, "remove_rule");
 	audit_log_format(ab, " dir=");
 	audit_log_untrustedstring(ab, rule->tree->pathname);
 	audit_log_key(ab, rule->filterkey);