audit: use data= not msg= for AUDIT_USER_TTY messages
authorEric Paris <eparis@redhat.com>
Thu, 11 Apr 2013 15:25:00 +0000 (11:25 -0400)
committerEric Paris <eparis@redhat.com>
Thu, 11 Apr 2013 15:26:03 +0000 (11:26 -0400)
Userspace parsing libraries assume that msg= is only for userspace audit
records, not for user tty records.  Make this consistent with the other
tty records.

Reported-by: Steve Grubb <sgrubb@redhat.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
kernel/audit.c

index 02a5d9eefa823436050d4ed59a624138a3de61cf..c45e6d2809d77f6cd3f05ceabb4a99e0e9d9cb83 100644 (file)
@@ -755,7 +755,7 @@ static int audit_receive_msg(struct sk_buff *skb, struct nlmsghdr *nlh)
                        else {
                                int size;
 
-                               audit_log_format(ab, " msg=");
+                               audit_log_format(ab, " data=");
                                size = nlmsg_len(nlh);
                                if (size > 0 &&
                                    ((unsigned char *)data)[size - 1] == '\0')