audit: implement audit by executable

[linux-2.6-block.git] / include / linux / audit.h

diff --git a/include/linux/audit.h b/include/linux/audit.h
index 759feb0e9d13123799da54c1823eafeb8257b0ee..b2abc996c25dabee1c9b55a97667e06ad436ec1e 100644 (file)
--- a/include/linux/audit.h
+++ b/include/linux/audit.h
@@ -62,6 +62,7 @@ struct audit_krule {
        struct audit_field      *inode_f; /* quick access to an inode field */
        struct audit_watch      *watch; /* associated watch */
        struct audit_tree       *tree;  /* associated watched tree */
+       struct audit_fsnotify_mark      *exe;
        struct list_head        rlist;  /* entry in audit_{watch,tree}.rules list */
        struct list_head        list;   /* for AUDIT_LIST* purposes only */
        u64                     prio;