diff options
| author |   Richard Guy Briggs <rgb@redhat.com> | 2017-01-13 03:26:29 -0500 |
|---|---|---|
| committer |   Paul Moore <paul@paul-moore.com> | 2017-01-18 14:32:52 -0500 |
| commit | 92c82e8a322b32a6cabe7d8800dc10401157a623 (patch) | |
| tree | 32efb225fd981c63024087f030165baeb37e761c /net/compat.c | |
| parent | audit: Make AUDIT_ANOM_ABEND event normalized (diff) | |
| download | linux-dev-92c82e8a322b32a6cabe7d8800dc10401157a623.tar.xz linux-dev-92c82e8a322b32a6cabe7d8800dc10401157a623.zip | |
audit: add feature audit_lost reset
Add a method to reset the audit_lost value.
An AUDIT_SET message with the AUDIT_STATUS_LOST flag set by itself
will return a positive value repesenting the current audit_lost value
and reset the counter to zero. If AUDIT_STATUS_LOST is not the
only flag set, the reset command will be ignored. The value sent with
the command is ignored. The return value will be the +ve lost value at
reset time.
An AUDIT_CONFIG_CHANGE message will be queued to the listening audit
daemon. The message will be a standard CONFIG_CHANGE message with the
fields "lost=0" and "old=" with the latter containing the value of
audit_lost at reset time.
See: https://github.com/linux-audit/audit-kernel/issues/3
Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Acked-by: Steve Grubb <sgrubb@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions