[AUDIT] add session id to audit messages
In order to correlate audit records to an individual login add a session id. This is incremented every time a user logs in and is included in almost all messages which currently output the auid. The field is labeled ses= or oses= Signed-off-by: Eric Paris <eparis@redhat.com>
This commit is contained in:
parent
c2a7780efe
commit
4746ec5b01
8 changed files with 61 additions and 26 deletions
|
@ -1141,6 +1141,7 @@ struct task_struct {
|
|||
struct audit_context *audit_context;
|
||||
#ifdef CONFIG_AUDITSYSCALL
|
||||
uid_t loginuid;
|
||||
unsigned int sessionid;
|
||||
#endif
|
||||
seccomp_t seccomp;
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue