[RFC][PATCH] selinux: Report result in avc messages

Stephen Smalley stephen.smalley at gmail.com
Thu May 1 20:11:57 UTC 2014


I'm fine with it as is.

On Thu, May 1, 2014 at 12:09 PM, Paul Moore <paul at paul-moore.com> wrote:
> On Wednesday, April 30, 2014 09:08:28 AM Stephen Smalley wrote:
>> The revised patch switched from result=allowed|denied to
>> permissive=0|1 in the avc message.  I think Bill's point was with
>> respect to the code, which still internally is passing around the
>> result of the decision and inferring the permissive state from it,
>> rather than the output string itself.
>
> I'm fine with this patch, but before I merge it for next I just wanted to make
> sure there isn't another revision coming?
>
> --
> paul moore
> www.paul-moore.com
>




More information about the Linux-audit mailing list