[AUDIT] add session id to audit messages
In order to correlate audit records to an individual login add a session
id. This is incremented every time a user logs in and is included in
almost all messages which currently output the auid. The field is
labeled ses= or oses=
Signed-off-by:
Eric Paris <eparis@redhat.com>
Showing
- drivers/char/tty_audit.c 13 additions, 5 deletionsdrivers/char/tty_audit.c
- include/linux/audit.h 2 additions, 0 deletionsinclude/linux/audit.h
- include/linux/init_task.h 2 additions, 1 deletioninclude/linux/init_task.h
- include/linux/sched.h 1 addition, 0 deletionsinclude/linux/sched.h
- kernel/auditsc.c 27 additions, 9 deletionskernel/auditsc.c
- net/core/dev.c 3 additions, 2 deletionsnet/core/dev.c
- security/selinux/selinuxfs.c 10 additions, 7 deletionssecurity/selinux/selinuxfs.c
- security/selinux/ss/services.c 3 additions, 2 deletionssecurity/selinux/ss/services.c
Loading
Please register or sign in to comment