[PATCH] LSM hooks for audit

From: Serge Hallyn (serue@private)
Date: Wed Sep 15 2004 - 06:59:38 PDT


Hi,

Attached is a patch which provides LSM controls over actions related to
the new audit framework.  As a specific example, we might like to have
an "audit role", enabled by selinux or some other LSM, which would be
the only role allowed to add or delete filter rules.

What do people think about adding these hooks, both in general and these
hooks specifically?

thanks,
-serge

-- 
=======================================================
Serge Hallyn
Security Software Engineer, IBM Linux Technology Center
serue@private





This archive was generated by hypermail 2.1.3 : Wed Sep 15 2004 - 05:53:12 PDT