[PATCH] Fix a bug of producing summary reports of the log which type is MAC_IPSEC_EVENT

Peng Haitao penght at cn.fujitsu.com
Mon Sep 1 06:49:27 UTC 2008


Hello steve,

the log which type is MAC_IPSEC_EVENT, MAC_UNLBL_STCADD or MAC_UNLBL_STCDEL, aureport cannot report it.

Signed-off-by: Peng Haitao <penght at cn.fujitsu.com>

---
 src/aureport-scan.c |    8 ++++----
 1 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/aureport-scan.c b/src/aureport-scan.c
index 0d880b0..7803430 100644
--- a/src/aureport-scan.c
+++ b/src/aureport-scan.c
@@ -447,7 +447,7 @@ static int per_event_detailed(llist *l)
 			if (report_detail == D_DETAILED) {
 				if (list_find_msg_range(l, 
 						AUDIT_MAC_POLICY_LOAD,
-						AUDIT_MAC_IPSEC_DELSPD)) {
+						AUDIT_MAC_UNLBL_STCDEL)) {
 					print_per_event_item(l);
 					rc = 1;
 				} else {
@@ -472,7 +472,7 @@ static int per_event_detailed(llist *l)
 				rc = 1;
 			} else if (list_find_msg_range(l,
 					AUDIT_MAC_POLICY_LOAD,
-					AUDIT_MAC_IPSEC_DELSPD)) {
+					AUDIT_MAC_UNLBL_STCDEL)) {
 						print_per_event_item(l);
 						rc = 1;
 			}
@@ -684,7 +684,7 @@ static void do_summary_total(llist *l)
 		sd.changes++;
 	list_first(l);
 	if (list_find_msg_range(l, AUDIT_MAC_POLICY_LOAD,
-					AUDIT_MAC_IPSEC_DELSPD))
+					AUDIT_MAC_UNLBL_STCDEL))
 		sd.changes++;
 
 	// add acct changes
@@ -774,7 +774,7 @@ static void do_summary_total(llist *l)
 	// MAC
 	list_first(l);
 	if (list_find_msg_range(l, AUDIT_MAC_POLICY_LOAD,
-					AUDIT_MAC_IPSEC_DELSPD))
+					AUDIT_MAC_UNLBL_STCDEL))
 		sd.mac++;
 	if (list_find_msg_range(l, AUDIT_FIRST_USER_LSPP_MSG, 
 					AUDIT_LAST_USER_LSPP_MSG))
-- 
1.5.3


-- 
Regards
Peng Haitao




More information about the Linux-audit mailing list