[PATCH] fix ppid bug in 2.6.18 kernel
authorSteve Grubb <sgrubb@redhat.com>
Sat, 26 Aug 2006 18:06:20 +0000 (14:06 -0400)
committerAl Viro <viro@zeniv.linux.org.uk>
Mon, 11 Sep 2006 17:32:04 +0000 (13:32 -0400)
Hello,

During some troubleshooting, I found that ppid was accidentally omitted from
the legacy rule section. This resulted in EINVAL for any rule with ppid sent
with AUDIT_ADD.

Signed-off-by: Steve Grubb <sgrubb@redhat.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
kernel/auditfilter.c

index 6a9a5c5a4e7db9f03cb175e5448cf9a3bf209dc7..0d6a8fc21f17b59d27767d8686aabf04291c5d3e 100644 (file)
@@ -404,6 +404,7 @@ static struct audit_entry *audit_rule_to_entry(struct audit_rule *rule)
                case AUDIT_PERS:
                case AUDIT_ARCH:
                case AUDIT_MSGTYPE:
+               case AUDIT_PPID:
                case AUDIT_DEVMAJOR:
                case AUDIT_DEVMINOR:
                case AUDIT_EXIT: