summaryrefslogtreecommitdiffstats
path: root/kernel/auditsc.c
diff options
context:
space:
mode:
authorSteve Grubb <sgrubb@redhat.com>2016-12-14 16:00:13 -0500
committerPaul Moore <paul@paul-moore.com>2016-12-14 16:00:13 -0500
commit89670affa2a62c4868a2dd8a4195a1a2ec58cb27 (patch)
treeb7599060821081125d1116876280d28423135a44 /kernel/auditsc.c
parent7c397d01e43493dd087f9cd926cd1fcf508a8019 (diff)
downloadlinux-89670affa2a62c4868a2dd8a4195a1a2ec58cb27.tar.gz
linux-89670affa2a62c4868a2dd8a4195a1a2ec58cb27.tar.bz2
linux-89670affa2a62c4868a2dd8a4195a1a2ec58cb27.zip
audit: Make AUDIT_ANOM_ABEND event normalized
The audit event specification asks for certain fields to exist in all events. Running 'ausearch -m anom_abend -sv yes' returns no events. This patch adds the result field so that the AUDIT_ANOM_ABEND event conforms to the rules. Signed-off-by: Steve Grubb <sgrubb@redhat.com> Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'kernel/auditsc.c')
-rw-r--r--kernel/auditsc.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/kernel/auditsc.c b/kernel/auditsc.c
index f78cb1b3fa74..bb5f504592c6 100644
--- a/kernel/auditsc.c
+++ b/kernel/auditsc.c
@@ -2411,7 +2411,7 @@ void audit_core_dumps(long signr)
if (unlikely(!ab))
return;
audit_log_task(ab);
- audit_log_format(ab, " sig=%ld", signr);
+ audit_log_format(ab, " sig=%ld res=1", signr);
audit_log_end(ab);
}