[PATCH ghak106 V1] audit: join tty records to their syscall
Paul Moore
paul at paul-moore.com
Fri Feb 8 02:40:50 UTC 2019
On Tue, Feb 5, 2019 at 5:19 PM Richard Guy Briggs <rgb at redhat.com> wrote:
> AUDIT_TTY records were logged as seperate events from their syscall
> records. Join them so they are logged as the single event that they
> are.
>
> Please see the github issue
> https://github.com/linux-audit/audit-kernel/issues/106
>
> Signed-off-by: Richard Guy Briggs <rgb at redhat.com>
> ---
> Tested with ausearch-test-0.6 and audit-testsuite, manually inspected
> for record association.
>
> drivers/tty/tty_audit.c | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
Merged into audit/next.
--
paul moore
www.paul-moore.com
More information about the Linux-audit
mailing list