aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter/x_tables.c
diff options
context:
space:
mode:
authorRichard Guy Briggs <rgb@redhat.com>2020-04-22 17:39:29 -0400
committerPaul Moore <paul@paul-moore.com>2020-04-28 18:11:36 -0400
commita45d88530b2552ad5ea0da18861600b4ecc9d0c7 (patch)
tree1e0dbafc94be20e60529eb878ed288a72c13bbbd /net/netfilter/x_tables.c
parentc4dad0aab3fca0c1f0baa4cc84b6ec91b7ebf426 (diff)
downloadlinux-a45d88530b2552ad5ea0da18861600b4ecc9d0c7.tar.gz
netfilter: add audit table unregister actions
Audit the action of unregistering ebtables and x_tables. See: https://github.com/linux-audit/audit-kernel/issues/44 Signed-off-by: Richard Guy Briggs <rgb@redhat.com> Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'net/netfilter/x_tables.c')
-rw-r--r--net/netfilter/x_tables.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/net/netfilter/x_tables.c b/net/netfilter/x_tables.c
index 8f8c5dbf603df2..99a468be4a59fb 100644
--- a/net/netfilter/x_tables.c
+++ b/net/netfilter/x_tables.c
@@ -1472,6 +1472,8 @@ void *xt_unregister_table(struct xt_table *table)
private = table->private;
list_del(&table->list);
mutex_unlock(&xt[table->af].mutex);
+ audit_log_nfcfg(table->name, table->af, private->number,
+ AUDIT_XT_OP_UNREGISTER);
kfree(table);
return private;