From: Eric Paris Date: Mon, 7 Jan 2008 19:19:15 +0000 (-0500) Subject: [AUDIT] include audit type in audit message when using printk X-Git-Tag: v2.6.25-rc1~1080^2~8 X-Git-Url: https://git.karo-electronics.de/?a=commitdiff_plain;h=e445deb593d67c8ed13bd357c780a93d78bc84cf;p=karo-tx-linux.git [AUDIT] include audit type in audit message when using printk Currently audit drops the audit type when an audit message goes through printk instead of the audit deamon. This is a minor annoyance in that the audit type is no longer part of the message and the information the audit type conveys needs to be carried in, or derived from the message data. The attached patch includes the type number as part of the printk. Admittedly it isn't the type name that the audit deamon provides but I think this is better than dropping the type completely. Signed-pff-by: John Johansen Signed-off-by: Eric Paris --- diff --git a/kernel/audit.c b/kernel/audit.c index 801c946dd24b..cf6698289426 100644 --- a/kernel/audit.c +++ b/kernel/audit.c @@ -1438,7 +1438,8 @@ void audit_log_end(struct audit_buffer *ab) ab->skb = NULL; wake_up_interruptible(&kauditd_wait); } else { - printk(KERN_NOTICE "%s\n", ab->skb->data + NLMSG_SPACE(0)); + struct nlmsghdr *nlh = nlmsg_hdr(ab->skb); + printk(KERN_NOTICE "type=%d %s\n", nlh->nlmsg_type, ab->skb->data + NLMSG_SPACE(0)); } } audit_buffer_free(ab);