4 Commits

Author	SHA1	Message	Date
Darrel Goeddel	3dc7e3153e	[PATCH] support for context based audit filtering, part 2 ... This patch provides the ability to filter audit messages based on the elements of the process' SELinux context (user, role, type, mls sensitivity, and mls clearance). It uses the new interfaces from selinux to opaquely store information related to the selinux context and to filter based on that information. It also uses the callback mechanism provided by selinux to refresh the information when a new policy is loaded. Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>	2006-05-01 06:09:36 -04:00
Ingo Molnar	5a0bbce58b	[PATCH] sem2mutex: audit_netlink_sem ... Semaphore to mutex conversion. The conversion was generated via scripts, and the result was validated automatically via a script as well. Signed-off-by: Ingo Molnar <mingo@elte.hu> Cc: David Woodhouse <dwmw2@infradead.org> Signed-off-by: Andrew Morton <akpm@osdl.org> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>	2006-03-20 14:08:55 -05:00
Amy Griffis	93315ed6dd	[PATCH] audit string fields interface + consumer ... Updated patch to dynamically allocate audit rule fields in kernel's internal representation. Added unlikely() calls for testing memory allocation result. Amy Griffis wrote: [Wed Jan 11 2006, 02:02:31PM EST] > Modify audit's kernel-userspace interface to allow the specification > of string fields in audit rules. > > Signed-off-by: Amy Griffis <amy.griffis@hp.com> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> (cherry picked from 5ffc4a863f92351b720fe3e9c5cd647accff9e03 commit)	2006-03-20 14:08:54 -05:00
David Woodhouse	fe7752bab2	[PATCH] Fix audit record filtering with !CONFIG_AUDITSYSCALL ... This fixes the per-user and per-message-type filtering when syscall auditing isn't enabled. [AV: folded followup fix from the same author] Signed-off-by: David Woodhouse <dwmw2@infradead.org> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>	2006-03-20 14:08:54 -05:00