[PATCH v2] auparse: apparmor fields

Marcelo Henrique Cerri mhcerri at linux.vnet.ibm.com
Fri Mar 2 17:08:47 UTC 2012


Thanks, Steve.

I've run some tests and it's ok. The same for the other two patches.

I just had to fix some small bugs in the output of configure. Please,
take a look at the patch I've just sent.

Regards,
Marcelo

On Tue, 28 Feb 2012 18:15:48 -0500
Steve Grubb <sgrubb at redhat.com> wrote:

> On Monday, February 20, 2012 09:17:06 AM Marcelo Cerri wrote:
> > Just an update for the last patch. This patch contains a complete
> > list of apparmor avc fields.
> 
> It needed #ifdef WITH_APPARMOR since its a compile time option. I
> added the ifdef, you might want to make sure it still works.  Applied.
> 
> -Steve
> 
> > Regards,
> > Marcelo
> > ---
> >  auparse/typetab.h |    7 +++++++#ifdef WITH_APPARMOR
> >  1 files changed, 7 insertions(+), 0 deletions(-)
> > 
> > diff --git a/auparse/typetab.h b/auparse/typetab.h
> > index 7838c17..27c0ffb 100644
> > --- a/auparse/typetab.h
> > +++ b/auparse/typetab.h
> > @@ -86,3 +86,10 @@ _S(AUPARSE_TYPE_NFPROTO,	"family"	)
> >  _S(AUPARSE_TYPE_ICMPTYPE,	"icmptype"	)
> >  _S(AUPARSE_TYPE_PROTOCOL,	"proto"		)
> >  _S(AUPARSE_TYPE_ADDR,		"addr"		)
> > +_S(AUPARSE_TYPE_ESCAPED,	"apparmor"	)
> > +_S(AUPARSE_TYPE_ESCAPED,	"operation"	)
> > +_S(AUPARSE_TYPE_ESCAPED,	"denied_mask"	)
> > +_S(AUPARSE_TYPE_ESCAPED,	"info"		)
> > +_S(AUPARSE_TYPE_ESCAPED,	"profile"	)
> > +_S(AUPARSE_TYPE_ESCAPED,	"requested_mask")
> > +
> 




More information about the Linux-audit mailing list