diff options
| author | Richard Guy Briggs | 2017-05-02 16:16:04 +0200 |
|---|---|---|
| committer | Paul Moore | 2017-05-02 16:16:04 +0200 |
| commit | 2173c519d5e912a6e2934bb04255fcd36c1591c8 (patch) | |
| tree | 86334f8277c25e1d29516f23363c1b3cd2ad97e0 /kernel/audit_tree.c | |
| parent | netfilter: use consistent ipv4 network offset in xt_AUDIT (diff) | |
| download | kernel-qcow2-linux-2173c519d5e912a6e2934bb04255fcd36c1591c8.tar.gz kernel-qcow2-linux-2173c519d5e912a6e2934bb04255fcd36c1591c8.tar.xz kernel-qcow2-linux-2173c519d5e912a6e2934bb04255fcd36c1591c8.zip | |
audit: normalize NETFILTER_PKT
Eliminate flipping in and out of message fields, dropping fields in the
process.
Sample raw message format IPv4 UDP:
type=NETFILTER_PKT msg=audit(1487874761.386:228): mark=0xae8a2732 saddr=127.0.0.1 daddr=127.0.0.1 proto=17^]
Sample raw message format IPv6 ICMP6:
type=NETFILTER_PKT msg=audit(1487874761.381:227): mark=0x223894b7 saddr=::1 daddr=::1 proto=58^]
Issue: https://github.com/linux-audit/audit-kernel/issues/11
Test case: https://github.com/linux-audit/audit-testsuite/issues/43
Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'kernel/audit_tree.c')
0 files changed, 0 insertions, 0 deletions