Skip to contentSkip to conversation

Fix a bug of parsing the log which type is MAC_IPSEC_EVENT

PATCH Applied Peng Haitao 2 participants 2 messages Sep 1, 2008

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 Fix a bug of parsing the log which type is MAC_IPSEC_EVENT

Hello steve,

the log which type is MAC_IPSEC_EVENT, MAC_UNLBL_STCADD and MAC_UNLBL_STCDEL cannot be parsed in function extract_search_items().

---
 src/ausearch-parse.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
src/ausearch-parse.c +1 -1
index 5ba0fde..d2cb44d 100644
@@ -211,7 +211,7 @@ int extract_search_items(llist *l)
 			   AUDIT_FIRST_KERN_ANOM_MSG...AUDIT_LAST_KERN_ANOM_MSG:
 				ret = parse_kernel_anom(n, s);
 				break;
-			case AUDIT_MAC_POLICY_LOAD...AUDIT_MAC_IPSEC_DELSPD:
+			case AUDIT_MAC_POLICY_LOAD...AUDIT_MAC_UNLBL_STCDEL:
 				ret = parse_simple_message(n, s);
 				break;
 			case AUDIT_KERNEL:
Signature · 6 lines
1.5.3


-- 
Regards
Peng Haitao
Applied
#1 lore raw
Quoted 2 lines · On Monday 01 September 2008 02:43:54 Peng Haitao wrote:

the log which type is MAC_IPSEC_EVENT, MAC_UNLBL_STCADD and MAC_UNLBL_STCDEL cannot be parsed in function extract_search_items().

Applied. Thanks for the patch !

-Steve