[PATCH] support for context based audit filtering, part 2
authorDarrel Goeddel <dgoeddel@trustedcs.com>
Sat, 11 Mar 2006 00:14:06 +0000 (18:14 -0600)
committerAl Viro <viro@zeniv.linux.org.uk>
Mon, 1 May 2006 10:09:36 +0000 (06:09 -0400)
commit3dc7e3153eddfcf7ba8b50628775ba516e5f759f
tree926957e904739fc6c29e5125b7c1635b9f77548c
parent376bd9cb357ec945ac893feaeb63af7370a6e70b
[PATCH] support for context based audit filtering, part 2

This patch provides the ability to filter audit messages based on the
elements of the process' SELinux context (user, role, type, mls sensitivity,
and mls clearance).  It uses the new interfaces from selinux to opaquely
store information related to the selinux context and to filter based on that
information.  It also uses the callback mechanism provided by selinux to
refresh the information when a new policy is loaded.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
kernel/audit.c
kernel/audit.h
kernel/auditfilter.c
kernel/auditsc.c