[PATCH] selinux: remove AVC init audit log message

Paul Moore paul at paul-moore.com
Wed Aug 23 12:41:42 UTC 2017


On Wed, Aug 23, 2017 at 4:55 AM, Richard Guy Briggs <rgb at redhat.com> wrote:
> On 2017-07-28 18:47, Paul Moore wrote:
>> On Fri, Jul 28, 2017 at 3:23 AM, Richard Guy Briggs <rgb at redhat.com> wrote:
>> > In the process of normalizing audit log messages, it was noticed that the AVC
>> > initialization code registered an audit log KERNEL record that didn't fit the
>> > standard format.  In the process of attempting to normalize it it was
>> > determined that this record was not even necessary.  Remove it.
>> >
>> > Ref: http://marc.info/?l=selinux&m=149614868525826&w=2
>> > See: https://github.com/linux-audit/audit-kernel/issues/48
>> > Signed-off-by: Richard Guy Briggs <rgb at redhat.com>
>> > ---
>> >  security/selinux/avc.c |    2 --
>> >  1 files changed, 0 insertions(+), 2 deletions(-)
>>
>> Merged, thanks.
>
> Where has this been merged?  I'm not able to find it in linux-2.6,
> selinux/next or pcmoore-audit/next

I have no idea what you mean by pcmoore-audit/next, that isn't the
official audit repository or a mirror, but it has been merged into the
audit/next branch and is present in both the official audit repo on
kernel.org as well as the https://github.com/linux-audit/audit-kernel
mirror on GitHub.

 commit 739bde1f22292d76a179d4cbe29fc7bae86ef5e4
 Author: Richard Guy Briggs <rgb at redhat.com>
 Date:   Fri Jul 28 03:23:31 2017 -0400

   selinux: remove AVC init audit log message

   In the process of normalizing audit log messages, it was noticed that the AVC
   initialization code registered an audit log KERNEL record that didn't fit the
   standard format.  In the process of attempting to normalize it it was
   determined that this record was not even necessary.  Remove it.

   Ref: http://marc.info/?l=selinux&m=149614868525826&w=2
   See: https://github.com/linux-audit/audit-kernel/issues/48
   Signed-off-by: Richard Guy Briggs <rgb at redhat.com>
   Acked-by: Stephen Smalley <sds at tycho.nsa.gov>
   Acked-by: Steve Grubb <sgrubb at redhat.com>
   Signed-off-by: Paul Moore <paul at paul-moore.com>

-- 
paul moore
www.paul-moore.com




More information about the Linux-audit mailing list