Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b01f2cc1 authored by David Woodhouse's avatar David Woodhouse
Browse files

[AUDIT] Allow filtering on system call success _or_ failure 



Signed-off-by: default avatarDavid Woodhouse <dwmw2@infradead.org>
parent 17888225

kernel/auditsc.c

+6 −2
Original line number Original line Diff line number Diff line
@@ -440,8 +440,12 @@ static int audit_filter_rules(struct task_struct *tsk, 
				result = (ctx->return_code == value);

				result = (ctx->return_code == value);

			break;

			break;

		case AUDIT_SUCCESS:

		case AUDIT_SUCCESS:

			if (ctx && ctx->return_valid)

			if (ctx && ctx->return_valid) {

				if (value)

					result = (ctx->return_valid == AUDITSC_SUCCESS);

					result = (ctx->return_valid == AUDITSC_SUCCESS);

				else

					result = (ctx->return_valid == AUDITSC_FAILURE);

			}

			break;

			break;

		case AUDIT_DEVMAJOR:

		case AUDIT_DEVMAJOR:

			if (ctx) {

			if (ctx) {