tree d5f8d7b69e5caab35c253370c424fb3324928069
parent 3c90e828db81b22f37fa7d37b9759cd3f1d305ba
author Ondrej Mosnáček <omosnace@redhat.com> 1523260806 +0200
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1533275725 +0200

audit: allow not equal op for audit by executable

[ Upstream commit 23bcc480dac204c7dbdf49d96b2c918ed98223c2 ]

Current implementation of auditing by executable name only implements
the 'equal' operator. This patch extends it to also support the 'not
equal' operator.

See: https://github.com/linux-audit/audit-kernel/issues/53

Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
Reviewed-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>