Commit 89670aff authored by Steve Grubb's avatar Steve Grubb Committed by Paul Moore

audit: Make AUDIT_ANOM_ABEND event normalized

The audit event specification asks for certain fields to exist in
all events. Running 'ausearch -m anom_abend -sv yes' returns no
events. This patch adds the result field so that the
AUDIT_ANOM_ABEND event conforms to the rules.
Signed-off-by: default avatarSteve Grubb <sgrubb@redhat.com>
Signed-off-by: default avatarPaul Moore <paul@paul-moore.com>
parent 7c397d01
...@@ -2411,7 +2411,7 @@ void audit_core_dumps(long signr) ...@@ -2411,7 +2411,7 @@ void audit_core_dumps(long signr)
if (unlikely(!ab)) if (unlikely(!ab))
return; return;
audit_log_task(ab); audit_log_task(ab);
audit_log_format(ab, " sig=%ld", signr); audit_log_format(ab, " sig=%ld res=1", signr);
audit_log_end(ab); audit_log_end(ab);
} }
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment