From mboxrd@z Thu Jan 1 00:00:00 1970 From: Richard Guy Briggs Subject: Re: [PATCH] audit: always enable syscall auditing when supported and audit is enabled Date: Tue, 8 Dec 2015 15:50:52 -0500 Message-ID: <20151208205052.GC32667@madcap2.tricolour.ca> References: <20151208164237.15736.42955.stgit@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Content-Disposition: inline In-Reply-To: <20151208164237.15736.42955.stgit@localhost> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Paul Moore Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com On 15/12/08, Paul Moore wrote: > To the best of our knowledge, everyone who enables audit at compile > time also enables syscall auditing; this patch simplifies the Kconfig > menus by removing the option to disable syscall auditing when audit > is selected and the target arch supports it. > > Signed-off-by: Paul Moore ACK. > --- > init/Kconfig | 11 +++-------- > 1 file changed, 3 insertions(+), 8 deletions(-) > > diff --git a/init/Kconfig b/init/Kconfig > index c24b6f7..d4663b1 100644 > --- a/init/Kconfig > +++ b/init/Kconfig > @@ -299,20 +299,15 @@ config AUDIT > help > Enable auditing infrastructure that can be used with another > kernel subsystem, such as SELinux (which requires this for > - logging of avc messages output). Does not do system-call > - auditing without CONFIG_AUDITSYSCALL. > + logging of avc messages output). System call auditing is included > + on architectures which support it. > > config HAVE_ARCH_AUDITSYSCALL > bool > > config AUDITSYSCALL > - bool "Enable system-call auditing support" > + def_bool y > depends on AUDIT && HAVE_ARCH_AUDITSYSCALL > - default y if SECURITY_SELINUX > - help > - Enable low-overhead system-call auditing infrastructure that > - can be used independently or with another kernel subsystem, > - such as SELinux. > > config AUDIT_WATCH > def_bool y > > -- > Linux-audit mailing list > Linux-audit@redhat.com > https://www.redhat.com/mailman/listinfo/linux-audit - RGB -- Richard Guy Briggs Senior Software Engineer, Kernel Security, AMER ENG Base Operating Systems, Red Hat Remote, Ottawa, Canada Voice: +1.647.777.2635, Internal: (81) 32635, Alt: +1.613.693.0684x3545