Commit f7616102 authored by Eric Paris's avatar Eric Paris
Browse files

audit: use data= not msg= for AUDIT_USER_TTY messages 



Userspace parsing libraries assume that msg= is only for userspace audit
records, not for user tty records.  Make this consistent with the other
tty records.

Reported-by: default avatarSteve Grubb <sgrubb@redhat.com>
Signed-off-by: default avatarEric Paris <eparis@redhat.com>
parent e2c5adc8

kernel/audit.c

+1 −1
Original line number Diff line number Diff line
@@ -755,7 +755,7 @@ static int audit_receive_msg(struct sk_buff *skb, struct nlmsghdr *nlh) 
			else {

				int size;



				audit_log_format(ab, " msg=");

				audit_log_format(ab, " data=");

				size = nlmsg_len(nlh);

				if (size > 0 &&

				    ((unsigned char *)data)[size - 1] == '\0')