From: Eric Paris Date: Tue, 3 Jan 2012 19:23:08 +0000 (-0500) Subject: audit: allow interfield comparison in audit rules X-Git-Tag: v3.3-rc1~23^2~7 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=02d86a568c6d2d335256864451ac8ce781bc5652;p=pandora-kernel.git audit: allow interfield comparison in audit rules We wish to be able to audit when a uid=500 task accesses a file which is uid=0. Or vice versa. This patch introduces a new audit filter type AUDIT_FIELD_COMPARE which takes as an 'enum' which indicates which fields should be compared. At this point we only define the task->uid vs inode->uid, but other comparisons can be added. Signed-off-by: Eric Paris --- Reading git-diff-tree failed