[userspace PATCH v2 2/3] Add sessionid_set option from kernel uapi macro AUDIT_SESSIONID_SET

Add sessionid_set field option from kernel uapi macro SESSIONID_SET to enable specifying that sessionID is set or not in user filters. Signed-off-by: Richard Guy Briggs <rgb(a)redhat.com&gt; --- trunk/lib/fieldtab.h | 1 + trunk/lib/libaudit.c | 2 ++ trunk/lib/libaudit.h | 4 ++++ 3 files changed, 7 insertions(+), 0 deletions(-) diff --git a/trunk/lib/fieldtab.h b/trunk/lib/fieldtab.h index 84acc08..eeb951e 100644 --- a/trunk/lib/fieldtab.h +++ b/trunk/lib/fieldtab.h @@ -34,6 +34,7 @@ _S(AUDIT_LOGINUID, "loginuid" ) _S(AUDIT_LOGINUID_SET, "auid_set" ) _S(AUDIT_LOGINUID_SET, "loginuid_set" ) _S(AUDIT_SESSIONID, "sessionid" ) +_S(AUDIT_SESSIONID_SET,"sessionid_set") _S(AUDIT_PERS, "pers" ) _S(AUDIT_ARCH, "arch" ) _S(AUDIT_MSGTYPE, "msgtype" ) diff --git a/trunk/lib/libaudit.c b/trunk/lib/libaudit.c index 38776f4..5ffb720 100644 --- a/trunk/lib/libaudit.c +++ b/trunk/lib/libaudit.c @@ -1650,6 +1650,8 @@ int audit_rule_fieldpair_data(struct audit_rule_data **rulep, const char *pair, case AUDIT_LOGINUID_SET: if(!features) return -30; + /* fallthrough */ + case AUDIT_SESSIONID_SET: if (flags != AUDIT_FILTER_EXCLUDE && flags != AUDIT_FILTER_USER && flags != AUDIT_FILTER_EXIT) diff --git a/trunk/lib/libaudit.h b/trunk/lib/libaudit.h index 95b7a78..f8007c1 100644 --- a/trunk/lib/libaudit.h +++ b/trunk/lib/libaudit.h @@ -381,6 +381,10 @@ extern "C" { #define AUDIT_SESSIONID 25 #endif +#ifndef AUDIT_SESSIONID_SET +#define AUDIT_SESSIONID_SET 26 +#endif + /* Architectures */ #ifndef EM_ARM #define EM_ARM 40 -- 1.7.1