commit 7c397d01e43493dd087f9cd926cd1fcf508a8019
author Steve Grubb <sgrubb@redhat.com> Wed Dec 14 15:59:46 2016 -0500
committer Paul Moore <paul@paul-moore.com> Wed Dec 14 15:59:46 2016 -0500
tree 1c26386691417702fbaa165771f1a5af8b9e5028
parent 533c7b69c764ad5febb3e716899f43a75564fcab

audit: Make AUDIT_KERNEL event conform to the specification

The AUDIT_KERNEL event is not following name=value format. This causes
some information to get lost. The event has been reformatted to follow
the convention. Additionally the audit_enabled value was added for
troubleshooting purposes. The following is an example of the new event:

  type=KERNEL audit(1480621249.833:1): state=initialized
              audit_enabled=0 res=1

Signed-off-by: Steve Grubb <sgrubb@redhat.com>
[PM: commit tweaks to make checkpatch.pl happy]
Signed-off-by: Paul Moore <paul@paul-moore.com>