Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit c55fbbb4 authored by Nicolas Dichtel's avatar Nicolas Dichtel Committed by Pablo Neira Ayuso
Browse files

netfilter: ebtables: create audit records for replaces 



This is already done for x_tables (family AF_INET and AF_INET6), let's
do it for AF_BRIDGE also.

Signed-off-by: default avatarNicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent e42eff8a

net/bridge/netfilter/ebtables.c

+15 −0
Original line number Diff line number Diff line
@@ -26,6 +26,7 @@ 
#include <asm/uaccess.h>

#include <linux/smp.h>

#include <linux/cpumask.h>

#include <linux/audit.h>

#include <net/sock.h>

/* needed for logical [in,out]-dev filtering */

#include "../br_private.h"
@@ -1058,6 +1059,20 @@ static int do_replace_finish(struct net *net, struct ebt_replace *repl, 
	vfree(table);



	vfree(counterstmp);



#ifdef CONFIG_AUDIT

	if (audit_enabled) {

		struct audit_buffer *ab;



		ab = audit_log_start(current->audit_context, GFP_KERNEL,

				     AUDIT_NETFILTER_CFG);

		if (ab) {

			audit_log_format(ab, "table=%s family=%u entries=%u",

					 repl->name, AF_BRIDGE, repl->nentries);

			audit_log_end(ab);

		}

	}

#endif

	return ret;



free_unlock: