audit: log on errors from filter user rules
An error on an AUDIT_NEVER rule disabled logging on that rule. On error on AUDIT_NEVER rules, log. Signed-off-by: Richard Guy Briggs <rgb@redhat.com> Signed-off-by: Eric Paris <eparis@redhat.com>
This commit is contained in:
parent
6dd80aba90
commit
724e4fcc8d
2 changed files with 8 additions and 5 deletions
|
|
@ -869,7 +869,7 @@ static int audit_receive_msg(struct sk_buff *skb, struct nlmsghdr *nlh)
|
|||
return 0;
|
||||
|
||||
err = audit_filter_user(msg_type);
|
||||
if (err == 1) {
|
||||
if (err == 1) { /* match or error */
|
||||
err = 0;
|
||||
if (msg_type == AUDIT_USER_TTY) {
|
||||
err = tty_audit_push_current();
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue