[PATCH] Fix a bug of executing "aureport -a"

Steve Grubb sgrubb at redhat.com
Sat Sep 20 12:32:49 UTC 2008


On Friday 19 September 2008 23:39:36 Peng Haitao wrote:
> Use option "-a" cannot report about avc messages, when message type is
> USER_AVC.

Applied. Thanks for the patch. 

I quit working on USER_AVCs earlier this year because the source of the AVCs 
were not following the conventions we had long established about encoding 
certain fields. I don't know the current state or how many bugs you will 
find. One of the APIs added in 1.7.7 should help the writers of user space 
AVCs to properly encode some fields.

-Steve




More information about the Linux-audit mailing list