One AUDIT_USER_START remained. Replace it with AUDIT_CHGRP_ID also.

diff --git a/src/newgrp.c b/src/newgrp.c
index b3af03b9010f9d1636612b8465aa6494ccf51cdd..7c87af20394c8c29161937007d6388fde7db02ad 100644 (file)
--- a/src/newgrp.c
+++ b/src/newgrp.c
@@ -182,7 +182,15 @@ failure:
         */
        closelog ();
 #ifdef WITH_AUDIT
-       audit_logger (AUDIT_USER_START, Prog, "changing", NULL, getuid (), 0);
+       if (groupname) {
+               snprintf (audit_buf, sizeof(audit_buf),
+                         "changing new-group=%s", groupname);
+               audit_logger (AUDIT_CHGRP_ID, Prog,
+                             audit_buf, NULL, getuid (), 0);
+       } else {
+               audit_logger (AUDIT_CHGRP_ID, Prog, "changing",
+                             NULL, getuid (), 0);
+       }
 #endif
        exit (1);
 }