audit: drop the meaningless and format breaking word 'user'
authorEric Paris <eparis@redhat.com>
Tue, 3 Jan 2012 19:23:05 +0000 (14:23 -0500)
committerAl Viro <viro@zeniv.linux.org.uk>
Tue, 17 Jan 2012 21:16:54 +0000 (16:16 -0500)
commit3035c51e8ac0512686ceb9f2bd1d13bdc6e4fb29
tree7c26ee810b6d6678f960cf1bb5880055ac4c793f
parent5195d8e217a78697152d64fc09a16e063a022465
audit: drop the meaningless and format breaking word 'user'

userspace audit messages look like so:

type=USER msg=audit(1271170549.415:24710): user pid=14722 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:auditctl_t:s0-s0:c0.c1023 msg=''

That third field just says 'user'.  That's useless and doesn't follow the
key=value pair we are trying to enforce.  We already know it came from the
user based on the record type.  Kill that word.  Die.

Signed-off-by: Eric Paris <eparis@redhat.com>
kernel/audit.c