summaryrefslogtreecommitdiff
path: root/kernel/audit.h
diff options
context:
space:
mode:
authorMiloslav Trmac <mitr@redhat.com>2010-09-16 18:14:11 -0400
committerAl Viro <viro@zeniv.linux.org.uk>2010-10-30 01:41:57 -0400
commitd29be158a68254f58cf1fbf60ce1e89557a321aa (patch)
treecd42581516bc189c2e1d83b15fad984c7001561c /kernel/audit.h
parent2d10d8737ccdba752d60106abbc6ed4f37404923 (diff)
Audit: add support to match lsm labels on user audit messages
Add support for matching by security label (e.g. SELinux context) of the sender of an user-space audit record. The audit filter code already allows user space to configure such filters, but they were ignored during evaluation. This patch implements evaluation of these filters. For example, after application of this patch, PAM authentication logs caused by cron can be disabled using auditctl -a user,never -F subj_type=crond_t Signed-off-by: Miloslav Trmac <mitr@redhat.com> Acked-by: Eric Paris <eparis@redhat.com> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Diffstat (limited to 'kernel/audit.h')
0 files changed, 0 insertions, 0 deletions