]> git.baikalelectronics.ru Git - kernel.git/commit
[PATCH] support for context based audit filtering, part 2
authorDarrel Goeddel <dgoeddel@trustedcs.com>
Sat, 11 Mar 2006 00:14:06 +0000 (18:14 -0600)
committerAl Viro <viro@zeniv.linux.org.uk>
Mon, 1 May 2006 10:09:36 +0000 (06:09 -0400)
commitb55489a3934f990c1bc835de640b5cb8a754ca07
tree926957e904739fc6c29e5125b7c1635b9f77548c
parent32e347e93ec8f84ac32cabafbead31ee78d23290
[PATCH] support for context based audit filtering, part 2

This patch provides the ability to filter audit messages based on the
elements of the process' SELinux context (user, role, type, mls sensitivity,
and mls clearance).  It uses the new interfaces from selinux to opaquely
store information related to the selinux context and to filter based on that
information.  It also uses the callback mechanism provided by selinux to
refresh the information when a new policy is loaded.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
kernel/audit.c
kernel/audit.h
kernel/auditfilter.c
kernel/auditsc.c