Commit f7616102 authored Apr 11, 2013 by Eric Paris

audit: use data= not msg= for AUDIT_USER_TTY messages



Userspace parsing libraries assume that msg= is only for userspace audit
records, not for user tty records.  Make this consistent with the other
tty records.

Reported-by: Steve Grubb <sgrubb@redhat.com>
Signed-off-by: Eric Paris <eparis@redhat.com>

parent e2c5adc8

kernel/audit.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -755,7 +755,7 @@ static int audit_receive_msg(struct sk_buff skb, struct nlmsghdr nlh)
		else {
		int size;

		audit_log_format(ab, " msg=");
		audit_log_format(ab, " data=");
		size = nlmsg_len(nlh);
		if (size > 0 &&
		((unsigned char *)data)[size - 1] == '\0')