[PATCH ghau51/ghau40 v10 02/11] AUDIT_CONTAINER_ID message type basic support

This defines the message number for the audit container identifier information record should the kernel headers not be up to date and gives the record number a name for printing. See: https://github.com/linux-audit/audit-userspace/issues/51 See: https://github.com/linux-audit/audit-kernel/issues/90 See: https://github.com/linux-audit/audit-testsuite/issues/64 See: https://github.com/linux-audit/audit-kernel/wiki/RFE-Audit-Container-ID Signed-off-by: Richard Guy Briggs <rgb(a)redhat.com&gt; --- lib/libaudit.h | 4 ++++ lib/msg_typetab.h | 1 + 2 files changed, 5 insertions(+) diff --git a/lib/libaudit.h b/lib/libaudit.h index 7fe56f4c8b22..3b0b1e8d0d22 100644 --- a/lib/libaudit.h +++ b/lib/libaudit.h @@ -303,6 +303,10 @@ extern "C" { #define AUDIT_EVENT_LISTENER 1335 /* audit mcast sock join/part */ #endif +#ifndef AUDIT_CONTAINER_ID +#define AUDIT_CONTAINER_ID 1336 /* Container ID */ +#endif + #ifndef AUDIT_MAC_CALIPSO_ADD #define AUDIT_MAC_CALIPSO_ADD 1418 /* NetLabel: add CALIPSO DOI entry */ #endif diff --git a/lib/msg_typetab.h b/lib/msg_typetab.h index 376e121e1278..9484bdce6776 100644 --- a/lib/msg_typetab.h +++ b/lib/msg_typetab.h @@ -128,6 +128,7 @@ _S(AUDIT_TIME_INJOFFSET, "TIME_INJOFFSET" ) _S(AUDIT_TIME_ADJNTPVAL, "TIME_ADJNTPVAL" ) _S(AUDIT_BPF, "BPF" ) _S(AUDIT_EVENT_LISTENER, "EVENT_LISTENER" ) +_S(AUDIT_CONTAINER_ID, "CONTAINER_ID" ) _S(AUDIT_AVC, "AVC" ) _S(AUDIT_SELINUX_ERR, "SELINUX_ERR" ) _S(AUDIT_AVC_PATH, "AVC_PATH" ) -- 2.18.4