isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

We can use evlog.submit_time in the call to eventlog_alert().

Browse Source 
This is set to the current wallclock time by sudoers_to_eventlog().
This commit is contained in:
Todd C. Miller
2023-11-23 09:08:04 -05:00
parent 39ea3176c1
commit 0e53d5fddf
2 changed files with 2 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
plugins/sudoers/audit.c
View File

@@ -434,7 +434,6 @@ sudoers_audit_error(const char *plugin_name, unsigned int plugin_type,
{
const struct sudoers_context *ctx = sudoers_get_context();
struct eventlog evlog;
struct timespec now;
int ret = true;
debug_decl(sudoers_audit_error, SUDOERS_DEBUG_PLUGIN);
@@ -447,13 +446,8 @@ sudoers_audit_error(const char *plugin_name, unsigned int plugin_type,
ret = false;
}
if (sudo_gettime_real(&now)) {
sudo_warn("%s", U_("unable to get time of day"));
debug_return_bool(false);
}
audit_to_eventlog(ctx, &evlog, command_info, ctx->runas.argv, NULL, NULL);
if (!eventlog_alert(&evlog, 0, &now, message, NULL))
if (!eventlog_alert(&evlog, 0, &evlog.submit_time, message, NULL))
ret = false;
if (!log_server_alert(ctx, &evlog, message, NULL))