From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: [PATCH v2] auparse: apparmor fields Date: Tue, 28 Feb 2012 18:15:48 -0500 Message-ID: <201202281815.48924.sgrubb@redhat.com> References: <1329482562-21751-1-git-send-email-mhcerri@linux.vnet.ibm.com> <1329747426-12625-1-git-send-email-mhcerri@linux.vnet.ibm.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <1329747426-12625-1-git-send-email-mhcerri@linux.vnet.ibm.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com Cc: gcwilson@us.ibm.com, bryntcor@us.ibm.com List-Id: linux-audit@redhat.com On Monday, February 20, 2012 09:17:06 AM Marcelo Cerri wrote: > Just an update for the last patch. This patch contains a complete list of > apparmor avc fields. It needed #ifdef WITH_APPARMOR since its a compile time option. I added the ifdef, you might want to make sure it still works. Applied. -Steve > Regards, > Marcelo > --- > auparse/typetab.h | 7 +++++++#ifdef WITH_APPARMOR > 1 files changed, 7 insertions(+), 0 deletions(-) > > diff --git a/auparse/typetab.h b/auparse/typetab.h > index 7838c17..27c0ffb 100644 > --- a/auparse/typetab.h > +++ b/auparse/typetab.h > @@ -86,3 +86,10 @@ _S(AUPARSE_TYPE_NFPROTO, "family" ) > _S(AUPARSE_TYPE_ICMPTYPE, "icmptype" ) > _S(AUPARSE_TYPE_PROTOCOL, "proto" ) > _S(AUPARSE_TYPE_ADDR, "addr" ) > +_S(AUPARSE_TYPE_ESCAPED, "apparmor" ) > +_S(AUPARSE_TYPE_ESCAPED, "operation" ) > +_S(AUPARSE_TYPE_ESCAPED, "denied_mask" ) > +_S(AUPARSE_TYPE_ESCAPED, "info" ) > +_S(AUPARSE_TYPE_ESCAPED, "profile" ) > +_S(AUPARSE_TYPE_ESCAPED, "requested_mask") > +