[PATCH] [STABLE] audit: remove superfluous new- prefix in AUDIT_LOGIN messages

Laurent Bigonville bigon at debian.org
Sun Jul 13 04:21:49 UTC 2014


Le Tue, 17 Jun 2014 21:28:19 -0400,
Richard Guy Briggs <rgb at redhat.com> a écrit :

> The new- prefix on ses and auid are un-necessary and break ausearch.

FYI the patch has been included in 3.14.12 stable release.

aulast is now showing again when a user is login-in on the machine

I still probably have one (unrelated) issue where aulast think that my
user that has login using gdm is "down".

Cheers,

Laurent Bigonville

> 
> Upstream-commit: aa589a1
> Cc: stable at vger.kernel.org # v3.14-rc1 to v3.14
> Reported-by: Steve Grubb <sgrubb at redhat.com>
> Signed-off-by: Richard Guy Briggs <rgb at redhat.com>
> ---
>  kernel/auditsc.c |    2 +-
>  1 files changed, 1 insertions(+), 1 deletions(-)
> 
> diff --git a/kernel/auditsc.c b/kernel/auditsc.c
> index 37e6216..619b58d 100644
> --- a/kernel/auditsc.c
> +++ b/kernel/auditsc.c
> @@ -1991,7 +1991,7 @@ static void audit_log_set_loginuid(kuid_t
> koldloginuid, kuid_t kloginuid, if (!ab)
>  		return;
>  	audit_log_format(ab, "pid=%d uid=%u"
> -			 " old-auid=%u new-auid=%u old-ses=%u
> new-ses=%u"
> +			 " old-auid=%u auid=%u old-ses=%u ses=%u"
>  			 " res=%d",
>  			 current->pid, uid,
>  			 oldloginuid, loginuid, oldsessionid,
> sessionid,





More information about the Linux-audit mailing list