[RFC PATCH 3/3] debug! audit: remove arch_f pointer from struct audit_krule

From: Richard Guy Briggs <rgb@redhat.com>
To: Linux-Audit Mailing List <linux-audit@redhat.com>,
	LKML <linux-kernel@vger.kernel.org>
Cc: Paul Moore <paul@paul-moore.com>, Eric Paris <eparis@redhat.com>,
	Steve Grubb <sgrubb@redhat.com>,
	Richard Guy Briggs <rgb@redhat.com>
Subject: [RFC PATCH 3/3] debug! audit: remove arch_f pointer from struct audit_krule
Date: Mon, 12 Feb 2018 07:29:41 -0500	[thread overview]
Message-ID: <bd856b745b53b72fa33f9b0942894ac04a1d092c.1518435853.git.rgb@redhat.com> (raw)
In-Reply-To: <cover.1518435853.git.rgb@redhat.com>
In-Reply-To: <cover.1518435853.git.rgb@redhat.com>

Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
---
 kernel/auditfilter.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/kernel/auditfilter.c b/kernel/auditfilter.c
index 48dcb59..3938ad2c 100644
--- a/kernel/auditfilter.c
+++ b/kernel/auditfilter.c
@@ -228,6 +228,8 @@ static int audit_match_signal(struct audit_entry *entry)
 		if (entry->rule.fields[i].type == AUDIT_ARCH) {
 			arch = &entry->rule.fields[i];
 			archval = arch->val;
+			pr_info("ams_: i=%d arch_f=%px type=%d op=%d val=%x key=\"%s\"",
+				i, arch, arch->type, arch->op, arch->val, entry->rule.filterkey ?: "");
 			break;
 		}
 
-- 
1.8.3.1
