Fix a bug of parsing the log which type is MAC_IPSEC_EVENT
PATCH 1/1 Fix a bug of parsing the log which type is MAC_IPSEC_EVENT
Hello steve,
the log which type is MAC_IPSEC_EVENT, MAC_UNLBL_STCADD and MAC_UNLBL_STCDEL cannot be parsed in function extract_search_items().
Signed-off-by Peng Haitao <[email protected]>
--- src/ausearch-parse.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)
src/ausearch-parse.c +1 -1
@@ -211,7 +211,7 @@ int extract_search_items(llist *l) AUDIT_FIRST_KERN_ANOM_MSG...AUDIT_LAST_KERN_ANOM_MSG: ret =parse_kernel_anom (n, s);break ; - case AUDIT_MAC_POLICY_LOAD...AUDIT_MAC_IPSEC_DELSPD: + case AUDIT_MAC_POLICY_LOAD...AUDIT_MAC_UNLBL_STCDEL: ret =parse_simple_message (n, s);break ;case AUDIT_KERNEL :
Signature · 6 lines
1.5.3 -- Regards Peng Haitao
Steve Grubb
AppliedQuoted 2 lines · On Monday 01 September 2008 02:43:54 Peng Haitao wrote:
the log which type is
MAC_IPSEC_EVENT,MAC_UNLBL_STCADDandMAC_UNLBL_STCDELcannot be parsed in functionextract_search_items().
Applied. Thanks for the patch !
-Steve