From mboxrd@z Thu Jan 1 00:00:00 1970 From: Peng Haitao Subject: [PATCH] Fix a bug of parsing the log which type is MAC_IPSEC_EVENT Date: Mon, 01 Sep 2008 14:43:54 +0800 Message-ID: <48BB8F2A.4000305@cn.fujitsu.com> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Return-path: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Steve Grubb Cc: audit-list List-Id: linux-audit@redhat.com Hello steve, the log which type is MAC_IPSEC_EVENT, MAC_UNLBL_STCADD and MAC_UNLBL_STCDEL cannot be parsed in function extract_search_items(). Signed-off-by: Peng Haitao --- src/ausearch-parse.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/src/ausearch-parse.c b/src/ausearch-parse.c index 5ba0fde..d2cb44d 100644 --- a/src/ausearch-parse.c +++ b/src/ausearch-parse.c @@ -211,7 +211,7 @@ int extract_search_items(llist *l) AUDIT_FIRST_KERN_ANOM_MSG...AUDIT_LAST_KERN_ANOM_MSG: ret = parse_kernel_anom(n, s); break; - case AUDIT_MAC_POLICY_LOAD...AUDIT_MAC_IPSEC_DELSPD: + case AUDIT_MAC_POLICY_LOAD...AUDIT_MAC_UNLBL_STCDEL: ret = parse_simple_message(n, s); break; case AUDIT_KERNEL: -- 1.5.3 -- Regards Peng Haitao