RepoMirrors/selinux
1
0
Fork 0
mirror of https://github.com/SELinuxProject/selinux synced 2024-12-23 22:42:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

libselinux: Add permissive= entry to avc audit log

Browse Source 
Add audit log entry to specify whether the decision was made in
permissive mode/permissive domain or enforcing mode.

Signed-off-by: Richard Haines <richard_c_haines@btinternet.com>
This commit is contained in:
Richard Haines 2017-04-28 14:05:16 +01:00 committed by Stephen Smalley
parent f3a264c2e1
commit 9cba8f6151
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
libselinux/src/avc.c
View File

@ -723,6 +723,10 @@ void avc_audit(security_id_t ssid, security_id_t tsid,
log_append(avc_audit_buf, " ");
avc_dump_query(ssid, tsid, tclass);
if (denied)
log_append(avc_audit_buf, " permissive=%u", result ? 0 : 1);
log_append(avc_audit_buf, "\n");
avc_log(SELINUX_AVC, "%s", avc_audit_buf);