Linux-audit Archive on lore.kernel.org
 help / color / mirror / Atom feed
From: Paul Moore <pmoore@redhat.com>
To: linux-audit@redhat.com
Subject: [PATCH] audit: always enable syscall auditing when supported and audit is enabled
Date: Tue, 08 Dec 2015 11:42:37 -0500	[thread overview]
Message-ID: <20151208164237.15736.42955.stgit@localhost> (raw)

To the best of our knowledge, everyone who enables audit at compile
time also enables syscall auditing; this patch simplifies the Kconfig
menus by removing the option to disable syscall auditing when audit
is selected and the target arch supports it.

Signed-off-by: Paul Moore <pmoore@redhat.com>
---
 init/Kconfig |   11 +++--------
 1 file changed, 3 insertions(+), 8 deletions(-)

diff --git a/init/Kconfig b/init/Kconfig
index c24b6f7..d4663b1 100644
--- a/init/Kconfig
+++ b/init/Kconfig
@@ -299,20 +299,15 @@ config AUDIT
 	help
 	  Enable auditing infrastructure that can be used with another
 	  kernel subsystem, such as SELinux (which requires this for
-	  logging of avc messages output).  Does not do system-call
-	  auditing without CONFIG_AUDITSYSCALL.
+	  logging of avc messages output).  System call auditing is included
+	  on architectures which support it.
 
 config HAVE_ARCH_AUDITSYSCALL
 	bool
 
 config AUDITSYSCALL
-	bool "Enable system-call auditing support"
+	def_bool y
 	depends on AUDIT && HAVE_ARCH_AUDITSYSCALL
-	default y if SECURITY_SELINUX
-	help
-	  Enable low-overhead system-call auditing infrastructure that
-	  can be used independently or with another kernel subsystem,
-	  such as SELinux.
 
 config AUDIT_WATCH
 	def_bool y

             reply	other threads:[~2015-12-08 16:42 UTC|newest]

Thread overview: 14+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2015-12-08 16:42 Paul Moore [this message]
2015-12-08 20:50 ` [PATCH] audit: always enable syscall auditing when supported and audit is enabled Richard Guy Briggs
2019-01-28  8:34 ` Sverdlin, Alexander (Nokia - DE/Ulm)
2019-01-28 14:19   ` Paul Moore
2019-01-28 14:36     ` Sverdlin, Alexander (Nokia - DE/Ulm)
2019-01-28 14:52       ` Paul Moore
2019-01-28 15:38         ` Sverdlin, Alexander (Nokia - DE/Ulm)
2019-01-28 16:26           ` Paul Moore
2019-01-28 20:03             ` Steve Grubb
2019-01-28 20:08               ` Paul Moore
2019-01-28 21:19                 ` Steve Grubb
2019-01-28 21:49                   ` Richard Guy Briggs
2019-01-28 22:01                   ` Paul Moore
2019-01-28 14:45     ` Sverdlin, Alexander (Nokia - DE/Ulm)

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20151208164237.15736.42955.stgit@localhost \
    --to=pmoore@redhat.com \
    --cc=linux-audit@redhat.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox