* [PATCH] Fix a bug of parsing the log which type is MAC_IPSEC_EVENT
@ 2008-09-01 6:43 Peng Haitao
2008-09-01 13:16 ` Steve Grubb
0 siblings, 1 reply; 2+ messages in thread
From: Peng Haitao @ 2008-09-01 6:43 UTC (permalink / raw)
To: Steve Grubb; +Cc: audit-list
Hello steve,
the log which type is MAC_IPSEC_EVENT, MAC_UNLBL_STCADD and MAC_UNLBL_STCDEL cannot be parsed in function extract_search_items().
Signed-off-by: Peng Haitao <penght@cn.fujitsu.com>
---
src/ausearch-parse.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/src/ausearch-parse.c b/src/ausearch-parse.c
index 5ba0fde..d2cb44d 100644
--- a/src/ausearch-parse.c
+++ b/src/ausearch-parse.c
@@ -211,7 +211,7 @@ int extract_search_items(llist *l)
AUDIT_FIRST_KERN_ANOM_MSG...AUDIT_LAST_KERN_ANOM_MSG:
ret = parse_kernel_anom(n, s);
break;
- case AUDIT_MAC_POLICY_LOAD...AUDIT_MAC_IPSEC_DELSPD:
+ case AUDIT_MAC_POLICY_LOAD...AUDIT_MAC_UNLBL_STCDEL:
ret = parse_simple_message(n, s);
break;
case AUDIT_KERNEL:
--
1.5.3
--
Regards
Peng Haitao
^ permalink raw reply related [flat|nested] 2+ messages in thread
end of thread, other threads:[~2008-09-01 13:16 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2008-09-01 6:43 [PATCH] Fix a bug of parsing the log which type is MAC_IPSEC_EVENT Peng Haitao
2008-09-01 13:16 ` Steve Grubb
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox