Signed-off-by: Richard Guy Briggs <rgb@xxxxxxxxxx> --- include/uapi/linux/audit.h | 2 ++ kernel/audit.c | 2 ++ 2 files changed, 4 insertions(+), 0 deletions(-) diff --git a/include/uapi/linux/audit.h b/include/uapi/linux/audit.h index 567b45f..b6a55fe 100644 --- a/include/uapi/linux/audit.h +++ b/include/uapi/linux/audit.h @@ -163,6 +163,8 @@ #define AUDIT_KERNEL 2000 /* Asynchronous audit record. NOT A REQUEST. */ +#define AUDIT_VIRT_CONTROL 2500 /* Start, Pause, Stop VM */ + /* Rule flags */ #define AUDIT_FILTER_USER 0x00 /* Apply rule to user-generated messages */ #define AUDIT_FILTER_TASK 0x01 /* Apply rule at task creation (not syscall) */ diff --git a/kernel/audit.c b/kernel/audit.c index a7b1b61..8a01d88 100644 --- a/kernel/audit.c +++ b/kernel/audit.c @@ -943,6 +943,8 @@ static int audit_receive_msg(struct sk_buff *skb, struct nlmsghdr *nlh) } audit_set_portid(ab, NETLINK_CB(skb).portid); audit_log_end(ab); + if (msg_type == AUDIT_VIRT_CONTROL) + audit_log_ns_info(NULL); mutex_lock(&audit_cmd_mutex); } break; -- 1.7.1 -- To unsubscribe from this list: send the line "unsubscribe linux-api" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
