Closed rgbriggs closed 6 years ago
Posted v1 patch upstream: https://www.redhat.com/archives/linux-audit/2018-May/msg00215.html
Posted v2 patch upstream: https://www.redhat.com/archives/linux-audit/2018-June/msg00011.html
Posted v3 patch upstream: https://www.redhat.com/archives/linux-audit/2018-June/msg00043.html
Merged d904ac0
The AUDIT_FILTER_TYPE name is vague and misleading due to not describing where or when the filter is applied and obsolete due to its available filter fields having been expanded.
Userspace has already renamed it from AUDIT_FILTER_TYPE to AUDIT_FILTER_EXCLUDE without checking if it already exists. In order to not cause userspace compile problems from duplicate definitions and to more accurately and inclusively rename it in the kernel, while providing a migration path for userspace, rename it to AUDIT_FILTER_EXCL.