audit: enforce op for string fields
authorRichard Guy Briggs <rgb@redhat.com>
Wed, 22 May 2019 21:52:02 +0000 (17:52 -0400)
committerPaul Moore <paul@paul-moore.com>
Tue, 28 May 2019 21:46:43 +0000 (17:46 -0400)
commit0223fad3c98a9588c159a35dda2ef6e68ca27e3f
tree35db4ae7622bb91db2a049d0d01249f8c566754e
parentbf361231c295d92a28ca283ea713f56e93e55796
audit: enforce op for string fields

The field operator is ignored on several string fields.  WATCH, DIR,
PERM and FILETYPE field operators are completely ignored and meaningless
since the op is not referenced in audit_filter_rules().  Range and
bitwise operators are already addressed in ghak73.

Honour the operator for WATCH, DIR, PERM, FILETYPE fields as is done in
the EXE field.

Please see github issue
https://github.com/linux-audit/audit-kernel/issues/114

Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
kernel/auditsc.c