commit 3b33ac3182a4554742757a0c61ee1df162cf8225
author Steve Grubb <sgrubb@redhat.com> Sat Aug 26 14:06:20 2006 -0400
committer Al Viro <viro@zeniv.linux.org.uk> Mon Sep 11 13:32:04 2006 -0400
tree edf8603a39931681f679388d3aaee154930f9192
parent e004876c3b0b6a71406069b0e55368cb9bbdc920

[PATCH] fix ppid bug in 2.6.18 kernel

Hello,

During some troubleshooting, I found that ppid was accidentally omitted from
the legacy rule section. This resulted in EINVAL for any rule with ppid sent
with AUDIT_ADD.

Signed-off-by: Steve Grubb <sgrubb@redhat.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>

kernel/auditfilter.c

diff --git a/kernel/auditfilter.c b/kernel/auditfilter.c
index 6a9a5c5a..0d6a8fc 100644
--- a/kernel/auditfilter.c
+++ b/kernel/auditfilter.c
@@ -404,6 +404,7 @@
 		case AUDIT_PERS:
 		case AUDIT_ARCH:
 		case AUDIT_MSGTYPE:
+		case AUDIT_PPID:
 		case AUDIT_DEVMAJOR:
 		case AUDIT_DEVMINOR:
 		case AUDIT_EXIT: