[PATCH 2/2] audit: add filterkey to special audit messages

Sven Schnelle svens at linux.ibm.com
Tue May 3 09:02:12 UTC 2022


For automated filtering/testing it is useful to have the
filter key logged in the message.

Signed-off-by: Sven Schnelle <svens at linux.ibm.com>
---
 kernel/auditsc.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/kernel/auditsc.c b/kernel/auditsc.c
index c856893041c9..2e349660a56f 100644
--- a/kernel/auditsc.c
+++ b/kernel/auditsc.c
@@ -1508,6 +1508,7 @@ static void show_special(struct audit_context *context, int *call_panic)
 		audit_log_time(context, &ab);
 		break;
 	}
+	audit_log_key(ab, context->filterkey);
 	audit_log_end(ab);
 }
 
-- 
2.32.0



More information about the Linux-audit mailing list