mirror of
https://git.proxmox.com/git/mirror_ubuntu-kernels.git
synced 2026-01-07 09:21:50 +00:00
[AUDIT] Allow filtering on system call success _or_ failure
Signed-off-by: David Woodhouse <dwmw2@infradead.org>
This commit is contained in:
parent
17888225c2
commit
b01f2cc1c3
@ -440,8 +440,12 @@ static int audit_filter_rules(struct task_struct *tsk,
|
||||
result = (ctx->return_code == value);
|
||||
break;
|
||||
case AUDIT_SUCCESS:
|
||||
if (ctx && ctx->return_valid)
|
||||
result = (ctx->return_valid == AUDITSC_SUCCESS);
|
||||
if (ctx && ctx->return_valid) {
|
||||
if (value)
|
||||
result = (ctx->return_valid == AUDITSC_SUCCESS);
|
||||
else
|
||||
result = (ctx->return_valid == AUDITSC_FAILURE);
|
||||
}
|
||||
break;
|
||||
case AUDIT_DEVMAJOR:
|
||||
if (ctx) {
|
||||
|
||||
Loading…
Reference in New Issue
Block a user