[PATCH] field-dictionary: add ioctlcmd

[Paul Moore]

On Fri, Jul 15, 2016 at 3:55 PM,  <william.c.roberts at intel.com> wrote:
> From: William Roberts <william.c.roberts at intel.com>
>
> Per-request ioctlcmd controls were added to SE Linux, however
> the audit field dictionary was not updated.
>
> This patch updates that dictionary.
>
> Signed-off-by: William Roberts <william.c.roberts at intel.com>
> ---
>  specs/fields/field-dictionary.csv | 1 +
>  1 file changed, 1 insertion(+)

Applied, thanks!

> diff --git a/specs/fields/field-dictionary.csv b/specs/fields/field-dictionary.csv
> index a645085..5a922e5 100644
> --- a/specs/fields/field-dictionary.csv
> +++ b/specs/fields/field-dictionary.csv
> @@ -82,6 +82,7 @@ inode,numeric,inode number,
>  inode_gid,numeric,group id of the inode's owner,
>  inode_uid,numeric,user id of the inode's owner,
>  invalid_context,encoded,SELinux context,
> +ioctlcmd,numeric,The request argument to the ioctl syscall,
>  ipx-net,numeric,IPX network number,
>  item,numeric,which item is being recorded,
>  items,numeric,the number of path records in the event,
> --
> 1.9.1

-- 
paul moore
www.paul-moore.com