Stephen Smalley ca7786a2f9 selinux: Report permissive mode in avc: denied messages. ...

We cannot presently tell from an avc: denied message whether access was in
fact denied or was allowed due to global or per-domain permissive mode.
Add a permissive= field to the avc message to reflect this information.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Acked-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Paul Moore <pmoore@redhat.com>

2014-06-03 14:21:48 -05:00

..

include

selinux: Report permissive mode in avc: denied messages.

2014-06-03 14:21:48 -05:00

ss

selinux: add gfp argument to security_xfrm_policy_alloc and fix callers

2014-03-10 08:30:02 +01:00

.gitignore

SELinux: add .gitignore files for dynamic classes

2009-10-24 09:42:27 +08:00

avc.c

selinux: Report permissive mode in avc: denied messages.

2014-06-03 14:21:48 -05:00

exports.c

selinux: sparse fix: include selinux.h in exports.c

2011-09-09 16:56:32 -07:00

hooks.c

selinux: Report permissive mode in avc: denied messages.

2014-06-03 14:21:48 -05:00

Kconfig

selinux: Deprecate and schedule the removal of the the compat_net functionality

2008-12-31 12:54:11 -05:00

Makefile

selinux: change to new flag variable

2010-10-21 10:12:40 +11:00

netif.c

net: pass info struct via netdevice notifier

2013-05-28 13:11:01 -07:00

netlabel.c

selinux: ensure that the cached NetLabel secattr matches the desired SID

2013-12-04 16:08:17 -05:00

netlink.c

selinux: replace obsolete NLMSG_* with type safe nlmsg_*

2013-03-28 14:25:49 -04:00

netnode.c

selinux: fix problems in netnode when BUG() is compiled out

2013-07-25 13:03:27 -04:00

netport.c

SELinux: avc: remove the useless fields in avc_add_callback

2012-04-09 12:23:44 -04:00

nlmsgtab.c

selinux: add SOCK_DIAG_BY_FAMILY to the list of netlink message types

2014-02-05 12:20:48 -05:00

selinuxfs.c

Merge commit 'v3.14' into next

2014-04-14 11:23:14 +10:00

xfrm.c

selinux: add gfp argument to security_xfrm_policy_alloc and fix callers

2014-03-10 08:30:02 +01:00