Store the source of the matching rule and store in the event log.

The JSON logs will store the matching rule source.
This commit is contained in:
Todd C. Miller
2023-08-08 09:57:09 -06:00
parent 0b03511b85
commit e178b85821
6 changed files with 57 additions and 2 deletions

View File

@@ -906,6 +906,9 @@ fmt_info_messages(struct client_closure *closure, struct eventlog *evlog,
/* TODO - rungroups */
fill_num("runuid", evlog->runuid);
fill_str("runuser", evlog->runuser);
if (evlog->source != NULL) {
fill_str("source", evlog->source);
}
if (evlog->cwd != NULL) {
fill_str("submitcwd", evlog->cwd);
}