[PATCH 6/9] LSM/Audit: Introduce generic Audit LSM hooks

James Morris jmorris at namei.org
Mon Mar 3 21:20:25 UTC 2008


On Sat, 1 Mar 2008, Ahmed S. Darwish wrote:

> Introduce a generic Audit interface for security modules
> by adding the following new LSM hooks:
> 
> audit_rule_init(field, op, rulestr, lsmrule)
> audit_rule_known(krule)
> audit_rule_match(secid, field, op, rule, actx)
> audit_rule_free(rule)
> 
> Those hooks are only available if CONFIG_AUDIT is enabled.
> 
> Signed-off-by: Casey Schaufler <casey at schaufler-ca.com>
> Signed-off-by: Ahmed S. Darwish <darwish.07 at gmail.com>

Acked-by: James Morris <jmorris at namei.org>


-- 
James Morris
<jmorris at namei.org>




More information about the Linux-audit mailing list