From 0289f3fc8e632a08e09f2337eb78c0d8e8c18b85 Mon Sep 17 00:00:00 2001
From: Zigiria Kalmara <zigiria.kalmara@timesys.com>
Date: Thu, 7 May 2020 14:54:47 +0530
Subject: [PATCH 1/2] Defines_for_old_kernels

---
 lib/errtab.h         | 2 ++
 src/ausearch-parse.c | 7 +++++++
 2 files changed, 9 insertions(+)

diff --git a/lib/errtab.h b/lib/errtab.h
index 84ced29..9e4253d 100644
--- a/lib/errtab.h
+++ b/lib/errtab.h
@@ -154,5 +154,7 @@ _S(EKEYREJECTED,	"EKEYREJECTED"		)
 _S(EOWNERDEAD,		"EOWNERDEAD"		)
 _S(ENOTRECOVERABLE,	"ENOTRECOVERABLE"	)
 _S(ERFKILL,		"ERFKILL"		)
+#ifdef EHWPOISON
 _S(EHWPOISON,		"EHWPOISON"		)
 
+#endif
diff --git a/src/ausearch-parse.c b/src/ausearch-parse.c
index cc2a06c..9898481 100644
--- a/src/ausearch-parse.c
+++ b/src/ausearch-parse.c
@@ -40,6 +40,13 @@
 #include "ausearch-parse.h"
 #include "auparse-idata.h"
 
+#ifndef AUDIT_BPRM_FCAPS
+#define AUDIT_BPRM_FCAPS	1321	/* Information about fcaps increasing perms */
+#endif
+#ifndef AUDIT_CAPSET
+#define AUDIT_CAPSET		1322	/* Record showing argument to sys_capset */
+#endif
+
 #define NAME_OFFSET 28
 static const char key_sep[2] = { AUDIT_KEY_SEPARATOR, 0 };
 
diff --git a/auparse/normalize.c b/auparse/normalize.c
index cc2a06c..9898481 100644
--- a/auparse/normalize.c
+++ b/auparse/normalize.c
@@ -38,6 +38,14 @@
 #include "normalize_evtypetabs.h"
 
 
+#ifndef AUDIT_BPRM_FCAPS
+#define AUDIT_BPRM_FCAPS	1321	/* Information about fcaps increasing perms */
+#endif
+
+#ifndef AUDIT_NETFILTER_PKT
+#define AUDIT_NETFILTER_PKT	1324	/* Packets traversing netfilter chains */
+#endif
+
 /*
  * Field accessors. x is the new value, y is the variable
  * Layout is: 0xFFFF FFFF  where first is record and second is field
-- 
2.17.1