Re: [PATCH] Fix formatting of AUDIT_CONFIG_CHANGE events
On Wed, Nov 16, 2016 at 4:14 PM, Steve Grubb <sgrubb(a)redhat.com> wrote:
The AUDIT_CONFIG_CHANGE events sometimes use a op= field. The current
code
logs the value of the field with quotes. This field is documented to not be
encoded, so it should not have quotes.
Signed-off-by: Steve Grubb <sgrubb(a)redhat.com>
Looks good to me, merged.
--
paul moore
www.paul-moore.com