diff options
| author | Eric Paris <eparis@redhat.com> | 2010-04-20 16:21:36 +0200 |
|---|---|---|
| committer | James Morris <jmorris@namei.org> | 2010-04-21 01:58:18 +0200 |
| commit | 34c111f626e91adb23f90a91d2c7cd4dac9fa4b1 (patch) | |
| tree | 3ca16731ab7e9b6cc1848dd28852503506dd97e1 | |
| parent | IMA: use audit_log_untrusted_string rather than %s (diff) | |
| download | linux-34c111f626e91adb23f90a91d2c7cd4dac9fa4b1.tar.xz linux-34c111f626e91adb23f90a91d2c7cd4dac9fa4b1.zip | |
IMA: drop the word integrity in the audit message
integrity_audit_msg() uses "integrity:" in the audit message. This
violates the (loosely defined) audit system requirements that everything be
a key=value pair and it doesn't provide additional information. This can
be obviously gleaned from the message type. Just drop it.
Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Mimi Zohar <zohar@us.ibm.com>
Signed-off-by: James Morris <jmorris@namei.org>
| -rw-r--r-- | security/integrity/ima/ima_audit.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/security/integrity/ima/ima_audit.c b/security/integrity/ima/ima_audit.c index ff513ff737f5..fcb1f714cfcd 100644 --- a/security/integrity/ima/ima_audit.c +++ b/security/integrity/ima/ima_audit.c @@ -40,7 +40,7 @@ void integrity_audit_msg(int audit_msgno, struct inode *inode, return; ab = audit_log_start(current->audit_context, GFP_KERNEL, audit_msgno); - audit_log_format(ab, "integrity: pid=%d uid=%u auid=%u ses=%u", + audit_log_format(ab, "pid=%d uid=%u auid=%u ses=%u", current->pid, current_cred()->uid, audit_get_loginuid(current), audit_get_sessionid(current)); |