iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

audit: always enable syscall auditing when supported and audit is enabled

Browse Source 
To the best of our knowledge, everyone who enables audit at compile
time also enables syscall auditing; this patch simplifies the Kconfig
menus by removing the option to disable syscall auditing when audit
is selected and the target arch supports it.

Signed-off-by: Paul Moore <pmoore@redhat.com>
This commit is contained in:
Paul Moore 2016-01-13 09:18:55 -05:00 committed by Paul Moore
parent 96368701e1
commit cb74ed278f
1 changed files with 3 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
init/Kconfig
View File

@ -299,20 +299,15 @@ config AUDIT
help help
Enable auditing infrastructure that can be used with another Enable auditing infrastructure that can be used with another
kernel subsystem, such as SELinux (which requires this for kernel subsystem, such as SELinux (which requires this for
logging of avc messages output). Does not do system-call logging of avc messages output). System call auditing is included
auditing without CONFIG_AUDITSYSCALL. on architectures which support it.
config HAVE_ARCH_AUDITSYSCALL config HAVE_ARCH_AUDITSYSCALL
bool bool
config AUDITSYSCALL config AUDITSYSCALL
bool "Enable system-call auditing support" def_bool y
depends on AUDIT && HAVE_ARCH_AUDITSYSCALL depends on AUDIT && HAVE_ARCH_AUDITSYSCALL
default y if SECURITY_SELINUX
help
Enable low-overhead system-call auditing infrastructure that
can be used independently or with another kernel subsystem,
such as SELinux.
config AUDIT_WATCH config AUDIT_WATCH
def_bool y def_bool y