Al,
This patch is against the patch "audit string fields interface +
consumer" in the audit git tree. Please merge it in at the next
rebase. FWIW, the title should really be "audit string fields
interface" as there is no consumer in the patch.
Thanks Darrel. :-)
On Thu, Mar 16, 2006 at 02:38:52PM -0600, Darrel Goeddel wrote:
The following patch will return the data buffer for each rule
when listing the rules via AUDIT_LIST_RULES.
Signed-off-by: Darrel Goeddel <dgoeddel(a)trustedcs.com>
diff --git a/kernel/auditfilter.c b/kernel/auditfilter.c
index c895de7..c8af774 100644
--- a/kernel/auditfilter.c
+++ b/kernel/auditfilter.c
@@ -588,7 +588,7 @@ static int audit_list_rules(void *_dest)
if (unlikely(!data))
break;
audit_send_reply(pid, seq, AUDIT_LIST_RULES,
0, 1,
- data, sizeof(*data));
+ data, sizeof(*data) +
data->buflen);
kfree(data);
}
}
--
Darrel
--
Linux-audit mailing list
Linux-audit(a)redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit