]> git.baikalelectronics.ru Git - kernel.git/commit
TOMOYO: Allow controlling generation of access granted logs for per an entry basis.
authorTetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Sat, 10 Sep 2011 06:24:56 +0000 (15:24 +0900)
committerJames Morris <jmorris@namei.org>
Tue, 13 Sep 2011 22:27:06 +0000 (08:27 +1000)
commit66ee0ff3108a6296bccdf09e5e230a0bed1f85f6
tree379bbbf02f0a802453e585a2a482192409308fbb
parent78f804b34c529262d1c2fbe46260d933ab105bd8
TOMOYO: Allow controlling generation of access granted logs for per an entry basis.

Add per-entry flag which controls generation of grant logs because Xen and KVM
issues ioctl requests so frequently. For example,

  file ioctl /dev/null 0x5401 grant_log=no

will suppress /sys/kernel/security/tomoyo/audit even if preference says
grant_log=yes .

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>
security/tomoyo/audit.c
security/tomoyo/common.c
security/tomoyo/common.h
security/tomoyo/condition.c
security/tomoyo/domain.c