Hi, Attached is a patch which provides LSM controls over actions related to the new audit framework. As a specific example, we might like to have an "audit role", enabled by selinux or some other LSM, which would be the only role allowed to add or delete filter rules. What do people think about adding these hooks, both in general and these hooks specifically? thanks, -serge -- ======================================================= Serge Hallyn Security Software Engineer, IBM Linux Technology Center serue@private
This archive was generated by hypermail 2.1.3 : Wed Sep 15 2004 - 05:53:12 PDT