Fix ausearch csv output

audit-2.7.3-csv.patch

@@ -0,0 +1,12 @@
+diff -urp audit-2.7.2/src/ausearch-report.c audit-2.7.3/src/ausearch-report.c
+--- audit-2.7.2/src/ausearch-report.c	2017-02-13 09:22:49.618094389 -0500
++++ audit-2.7.3/src/ausearch-report.c	2017-02-13 10:55:50.000000000 -0500
+@@ -484,7 +484,7 @@ static void csv_event(auparse_state_t *a
+ 		fprintf(stderr, "error normalizing %s\n", type);
+ 
+ 		// Just dump an empty frame
+-		printf(",,,,,,,,%s%s\n", extra_labels ? ",," : "",
++		printf(",,,,,,,,,%s%s\n", extra_labels ? ",," : "",
+ 			extra_keys ? "," : "");
+ 		return;
+ 	}

audit.spec

@@ -3,12 +3,13 @@
 Summary: User space tools for 2.6 kernel auditing
 Name: audit
 Version: 2.7.2
-Release: 1%{?dist}
+Release: 2%{?dist}
 License: GPLv2+
 Group: System Environment/Daemons
 URL: http://people.redhat.com/sgrubb/audit/
 Source0: http://people.redhat.com/sgrubb/audit/%{name}-%{version}.tar.gz
 Source1: https://www.gnu.org/licenses/lgpl-2.1.txt
+Patch1: audit-2.7.3-csv.patch
 BuildRequires: openldap-devel
 BuildRequires: swig
 BuildRequires: python-devel
@@ -113,6 +114,7 @@ Management Facility) database, through an IBM Tivoli Directory Server
 %prep
 %setup -q
 cp %{SOURCE1} .
+%patch1 -p1
 
 %build
 %configure --sbindir=/sbin --libdir=/%{_lib} --with-python=yes \
@@ -308,6 +310,9 @@ fi
 %attr(750,root,root) /sbin/audispd-zos-remote
 
 %changelog
+* Mon Feb 13 2017 Steve Grubb <sgrubb@redhat.com> 2.7.2-2
+- Fix ausearch csv output
+
 * Mon Feb 13 2017 Steve Grubb <sgrubb@redhat.com> 2.7.2-1
 - New upstream feature and bugfix release