commit b01f2cc1c37ac3d5ca313c90370a586dffe5aca9
author David Woodhouse <dwmw2@shinybook.infradead.org> Sat Aug 27 10:25:43 2005 +0100
committer David Woodhouse <dwmw2@shinybook.infradead.org> Sat Aug 27 10:25:43 2005 +0100
tree 04fb64e730b6e36293c30cade3606cf53c8c8e20
parent 17888225c2f392bfdbac6c7f0713cbd9a4d02b05

[AUDIT] Allow filtering on system call success _or_ failure

Signed-off-by: David Woodhouse <dwmw2@infradead.org>

kernel/auditsc.c

diff --git a/kernel/auditsc.c b/kernel/auditsc.c
index 488ba3d..88696f6 100644
--- a/kernel/auditsc.c
+++ b/kernel/auditsc.c
@@ -440,8 +440,12 @@
 				result = (ctx->return_code == value);
 			break;
 		case AUDIT_SUCCESS:
-			if (ctx && ctx->return_valid)
-				result = (ctx->return_valid == AUDITSC_SUCCESS);
+			if (ctx && ctx->return_valid) {
+				if (value)
+					result = (ctx->return_valid == AUDITSC_SUCCESS);
+				else
+					result = (ctx->return_valid == AUDITSC_FAILURE);
+			}
 			break;
 		case AUDIT_DEVMAJOR:
 			if (ctx) {