-
Steve Beattie authored
The upstream kernel at some point between the 3.13 and 3.16 kernel adjusted the output of audit messages to include an additional "audit:" keyword. e.g. a 3.13 message would look like: kernel: [182243.243324] type=1400 audit(1409684003.960:273342): [SNIP] whereas in 3.16, it looks like: kernel: [182243.243324] audit: type=1400 audit(1409684003.960:273342): [SNIP] ^^^^^^ This patch adjust the libapparmor aalogparse grammar and lexer to compensate for this change. Signed-off-by: Steve Beattie <steve@nxnw.org> Acked-by: Seth Arnold <seth.arnold@canonical.com>
049cb961