[RFC][PATCH] collect security labels on user processes generating audit messages

Timothy R. Chavez tinytim at us.ibm.com
Thu Feb 9 17:39:47 UTC 2006


On Thu, 2006-02-09 at 12:03 -0500, James Morris wrote:
<snip>
> > > security_task_getsid() doesn't exist.
> > > 
> > > You created security_task_getsecurity(), which retrieves the security
> > > context.
> > 
> > Actually, security_task_getsid() does exist (or did exist last time I
> > updated the viro/audit-2.6 git tree).
> > 
> > http://www.promethos.org/lxr/http/ident?i=security_task_getsid
> 
> Oh, ok.
> 
> Where is security_task_getsecurity() used, then?
> 
> 
> - James

Hm... :) I made it at first because I was just going to extract the
context directly and store it with the skb_params, but then decided to
go the 'sid' route.  I left it in to expand the LSM API a little, but if
it's not being used currently, it probably shouldn't be included, eh?

Thanks.

-tim




More information about the Linux-audit mailing list