For automated filtering/testing it is useful to have the filter key logged in the message.
Signed-off-by: Sven Schnelle <[email protected]> --- kernel/auditsc.c | 1 + 1 file changed, 1 insertion(+) diff --git a/kernel/auditsc.c b/kernel/auditsc.c index c856893041c9..2e349660a56f 100644 --- a/kernel/auditsc.c +++ b/kernel/auditsc.c @@ -1508,6 +1508,7 @@ static void show_special(struct audit_context *context, int *call_panic) audit_log_time(context, &ab); break; } + audit_log_key(ab, context->filterkey); audit_log_end(ab); } -- 2.32.0 -- Linux-audit mailing list [email protected] https://listman.redhat.com/mailman/listinfo/linux-audit
