From mboxrd@z Thu Jan  1 00:00:00 1970
From: Steve Grubb <sgrubb@redhat.com>
Subject: Re: Refactoring src/ausearch-report.c:output_interpreted_node()
Date: Tue, 7 Oct 2014 11:26:49 -0400
Message-ID: <20141007112649.70200cac@ivy-bridge>
References: <1411958483.2752.33.camel@swtf.swtf.dyndns.org>
	<1528037.iuGHCJfh4q@x2>
	<1412200367.30162.43.camel@swtf.swtf.dyndns.org>
	<2237482.Rm13LQBSHi@x2>
	<1412242158.30162.46.camel@swtf.swtf.dyndns.org>
	<1412674290.9571.10.camel@swtf.swtf.dyndns.org>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
In-Reply-To: <1412674290.9571.10.camel@swtf.swtf.dyndns.org>
List-Unsubscribe: <https://www.redhat.com/mailman/options/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: Burn Alting <burn@swtf.dyndns.org>
Cc: linux-audit@redhat.com
List-Id: linux-audit@redhat.com

On Tue, 07 Oct 2014 20:31:30 +1100
Burn Alting <burn@swtf.dyndns.org> wrote:
> This patch prevents ausearch from parsing an event's "header" of node,
> type, time and serial twice. That is
> [node=<node>] type=<type> msg=audit(<epochsecs>.<msecs>:<serial>)
> 
> It does this by passing the llist->e value to
> output_interpreted_node() as this structure holds the already parsed
> event "header" information.
> 
> The code does not change the ausearch -i output.

Thanks for the patch. I've applied it locally and it seems to work
fine. Will commit it as soon as I can.

-Steve