audit: implement audit by executable
[linux-2.6-block.git] / kernel / auditsc.c
index ea3fe2b748a8544d8e7e7fc4b752b15c2834f29a..9b56b7ae053fb5c23a359fd27cfcb25120c05107 100644 (file)
@@ -466,6 +466,9 @@ static int audit_filter_rules(struct task_struct *tsk,
                                result = audit_comparator(ctx->ppid, f->op, f->val);
                        }
                        break;
+               case AUDIT_EXE:
+                       result = audit_exe_compare(tsk, rule->exe);
+                       break;
                case AUDIT_UID:
                        result = audit_uid_comparator(cred->uid, f->op, f->uid);
                        break;