[PATCH] Fix the bug that use option "--session Login-Session-ID" cannot search out all matched logs

Steve Grubb sgrubb at redhat.com
Mon Dec 6 16:41:11 UTC 2010


On Thursday, November 25, 2010 03:06:16 am Peng Haitao wrote:
> Use option '--session Login-Session-ID' cannot search out the log which 
> contains the given Login Session ID and message type is MAC_POLICY_LOAD.
> 
> For example:
> # echo "type=MAC_POLICY_LOAD msg=audit(1290670949.711:413341): policy
> loaded auid=0 ses=218" | ausearch --session 218 <no matches>
> 
> Signed-off-by: Peng Haitao <penght at cn.fujitsu.com>

Applied.

Thanks,
-Steve




More information about the Linux-audit mailing list