From: Jérémy Rosen <jeremy.rosen@enst-bretagne.fr>
Date: Sat, 16 Jun 2018 08:34:41 +0000 (+0200)
Subject: do not filter out deprecated USER audit messages
X-Git-Tag: v239~43
X-Git-Url: http://git.ipfire.org/?p=thirdparty%2Fsystemd.git;a=commitdiff_plain;h=ed563b609c9fe75124d9f9b6c4e9fec9c8e2fdd6

do not filter out deprecated USER audit messages
---

diff --git a/src/journal/journald-audit.c b/src/journal/journald-audit.c
index 058c921c5ea..5e56f3cf425 100644
--- a/src/journal/journald-audit.c
+++ b/src/journal/journald-audit.c
@@ -441,8 +441,8 @@ void server_process_audit_message(
         if (IN_SET(nl->nlmsg_type, NLMSG_NOOP, NLMSG_ERROR))
                 return;
 
-        /* Below AUDIT_FIRST_USER_MSG theer are only control messages, let's ignore those */
-        if (nl->nlmsg_type < AUDIT_FIRST_USER_MSG)
+        /* Except AUDIT_USER, all messsages below AUDIT_FIRST_USER_MSG are control messages, let's ignore those */
+        if (nl->nlmsg_type < AUDIT_FIRST_USER_MSG && nl->nlmsg_type != AUDIT_USER)
                 return;
 
         process_audit_string(s, nl->nlmsg_type, NLMSG_DATA(nl), nl->nlmsg_len - ALIGN(sizeof(struct nlmsghdr)));