Re: [PATCH] Light-weight Auditing Framework

[Stephen Smalley]

On Thu, 2004-03-11 at 09:25, Rik Faith wrote:
> Below is a patch against 2.6.4 that provides a low-overhead system-call
> auditing framework for Linux that is usable by LSM components (e.g.,
> SELinux).  This is an update of the patch discussed in this thread:
>     http://marc.theaimsgroup.com/?t=107815888100001&r=1&w=2

Just FYI, I have no objection to the changes in this patch to the
SELinux module; we would be glad to have SELinux use this auditing
framework if it is accepted into the mainline kernel.  I suppose we can
separately submit a patch to remove the avc_ratelimit code from the
SELinux avc, as that should be handled by the audit framework itself.

-- 
Stephen Smalley <sds@xxxxxxxxxxxxxx>
National Security Agency

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/