From 44c933e03e924d1205d1b3313700355b0c3f5eee Mon Sep 17 00:00:00 2001 From: Paul Moore Date: Tue, 14 Feb 2023 14:13:52 -0500 Subject: [PATCH] tests/filter_exclude: euid filtering now possible in exclude filter Starting with Steve's audit userspace v3.1, an euid exclude filter no longer results in an error. Adjust the test accordingly. Signed-off-by: Paul Moore --- tests/filter_exclude/test | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/filter_exclude/test b/tests/filter_exclude/test index 7a8e3fb..248fc54 100755 --- a/tests/filter_exclude/test +++ b/tests/filter_exclude/test @@ -103,7 +103,7 @@ $result = system("auditctl -a exclude,always -F ppid=$ppid >/dev/null 2>&1"); ok( $result ne 0 ); system("auditctl -d exclude,always -F ppid=$ppid >/dev/null 2>&1"); $result = system("auditctl -a exclude,always -F euid=$euid >/dev/null 2>&1"); -ok( $result ne 0 ); +ok( $result, 0 ); system("auditctl -d exclude,always -F euid=$euid >/dev/null 2>&1"); $result = system("auditctl -a exclude,always -F obj_user=$obj_user >/dev/null 2>&1");