• Steve Beattie's avatar
    libaalogparse: fix for new kernel dmesg format · 049cb961
    Steve Beattie authored
    The upstream kernel at some point between the 3.13 and 3.16 kernel
    adjusted the output of audit messages to include an additional "audit:"
    keyword. e.g. a 3.13 message would look like:
    
      kernel: [182243.243324] type=1400 audit(1409684003.960:273342): [SNIP]
    
    whereas in 3.16, it looks like:
    
      kernel: [182243.243324] audit: type=1400 audit(1409684003.960:273342): [SNIP]
                              ^^^^^^
    
    This patch adjust the libapparmor aalogparse grammar and lexer to
    compensate for this change.
    Signed-off-by: Steve Beattie's avatarSteve Beattie <steve@nxnw.org>
    Acked-by: default avatarSeth Arnold <seth.arnold@canonical.com>
    049cb961
grammar.y 12.3 KB