[PATCH v15 20/23] Audit: Add subj_LSM fields when necessary

Paul Moore paul at paul-moore.com
Sat Mar 7 02:18:43 UTC 2020


On Fri, Feb 21, 2020 at 7:06 PM Casey Schaufler <casey at schaufler-ca.com> wrote:
>
> Add record entries to identify subject data for all of the
> security modules when there is more than one.
>
> Acked-by: Stephen Smalley <sds at tycho.nsa.gov>
> Signed-off-by: Casey Schaufler <casey at schaufler-ca.com>
> Cc: netdev at vger.kernel.org
> Cc: linux-audit at redhat.com
> ---
>  drivers/android/binder.c                |  2 +-
>  include/linux/audit.h                   |  1 +
>  include/linux/security.h                |  9 ++++-
>  include/net/scm.h                       |  3 +-
>  kernel/audit.c                          | 40 ++++++++++++++++++-
>  kernel/audit_fsnotify.c                 |  1 +
>  kernel/auditfilter.c                    |  1 +
>  kernel/auditsc.c                        | 10 +++--
>  net/ipv4/ip_sockglue.c                  |  2 +-
>  net/netfilter/nf_conntrack_netlink.c    |  4 +-
>  net/netfilter/nf_conntrack_standalone.c |  2 +-
>  net/netfilter/nfnetlink_queue.c         |  2 +-
>  net/netlabel/netlabel_unlabeled.c       | 11 ++++--
>  net/netlabel/netlabel_user.c            |  2 +-
>  net/xfrm/xfrm_policy.c                  |  2 +
>  net/xfrm/xfrm_state.c                   |  2 +
>  security/integrity/ima/ima_api.c        |  1 +
>  security/integrity/integrity_audit.c    |  1 +
>  security/security.c                     | 51 +++++++++++++++++++++++--
>  19 files changed, 124 insertions(+), 23 deletions(-)

I'm not in love with some of the naming choices, but considering none
of it is visible to userspace it isn't worth worrying about.

Acked-by: Paul Moore <paul at paul-moore.com>

-- 
paul moore
www.paul-moore.com





More information about the Linux-audit mailing list