diff options
| author | Richard Guy Briggs <rgb@redhat.com> | 2020-04-22 17:39:29 -0400 |
|---|---|---|
| committer | Paul Moore <paul@paul-moore.com> | 2020-04-28 18:11:36 -0400 |
| commit | a45d88530b2552ad5ea0da18861600b4ecc9d0c7 (patch) | |
| tree | 1e0dbafc94be20e60529eb878ed288a72c13bbbd /net/bridge | |
| parent | c4dad0aab3fca0c1f0baa4cc84b6ec91b7ebf426 (diff) | |
netfilter: add audit table unregister actions
Audit the action of unregistering ebtables and x_tables.
See: https://github.com/linux-audit/audit-kernel/issues/44
Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'net/bridge')
| -rw-r--r-- | net/bridge/netfilter/ebtables.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/net/bridge/netfilter/ebtables.c b/net/bridge/netfilter/ebtables.c index 0a148e68b6e1..4778db5601b0 100644 --- a/net/bridge/netfilter/ebtables.c +++ b/net/bridge/netfilter/ebtables.c @@ -1124,6 +1124,8 @@ static void __ebt_unregister_table(struct net *net, struct ebt_table *table) mutex_lock(&ebt_mutex); list_del(&table->list); mutex_unlock(&ebt_mutex); + audit_log_nfcfg(table->name, AF_BRIDGE, table->private->nentries, + AUDIT_XT_OP_UNREGISTER); EBT_ENTRY_ITERATE(table->private->entries, table->private->entries_size, ebt_cleanup_entry, net, NULL); if (table->private->nentries) |