Re: [PATCH] selinux: add tracepoint on denials

[Paul Moore]

On Tue, Jul 28, 2020 at 12:02 PM ThiÃbaud Weksteen <tweek@xxxxxxxxxx> wrote:
> On Tue, Jul 28, 2020 at 5:12 PM Paul Moore <paul@xxxxxxxxxxxxxx> wrote:
> > Perhaps it would be helpful if you provided an example of how one
> > would be expected to use this new tracepoint?  That would help put
> > things in the proper perspective.
>
> The best example is the one I provided in the commit message, that is
> using perf (or a perf equivalent), to hook onto that tracepoint.

I probably wasn't as clear as I should have been.  I think it would be
helpful if you demonstrated how one would take the SELinux data in the
perf event and translated that into something meaningful.

-- 
paul moore
www.paul-moore.com