journal: use audit event names instead of numbers

System Internals / systemd - Zbigniew Jędrzejewski-Szmek [in.waw.pl] - 23 April 2015 22:54 UTC

is replaced by AVC, etc.

A fallback mechanism is provided for unlisted event types. Occasionally new types are added to the kernel, but not too often.

Add a simple "test", which simply prints the mapping.

8bb3626 journal: use audit event names instead of numbers
.gitignore | 1 +
Makefile.am | 9 ++++++++-
src/journal/audit-type.c | 1 +
src/journal/audit-type.h | 13 ++++++++++++
src/journal/journald-audit.c | 8 +++++---
src/journal/test-audit-type.c | 44 +++++++++++++++++++++++++++++++++++++++++
6 files changed, 72 insertions(+), 4 deletions(-)

Upstream: github.com

  • Share