Re: [PATCH v15 20/23] Audit: Add subj_LSM fields when necessary

Paul Moore
2020-03-07T02:19:11Z

On Fri, Feb 21, 2020 at 7:06 PM Casey Schaufler <casey@schaufler-ca.com> wrote:
>
> Add record entries to identify subject data for all of the
> security modules when there is more than one.
>
> Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
> Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
> Cc: netdev@vger.kernel.org
> Cc: linux-audit@redhat.com
> ---
> drivers/android/binder.c | 2 +-
> include/linux/audit.h | 1 +
> include/linux/security.h | 9 ++++-
> include/net/scm.h | 3 +-
> kernel/audit.c | 40 ++++++++++++++++++-
> kernel/audit_fsnotify.c | 1 +
> kernel/auditfilter.c | 1 +
> kernel/auditsc.c | 10 +++--
> net/ipv4/ip_sockglue.c | 2 +-
> net/netfilter/nf_conntrack_netlink.c | 4 +-
> net/netfilter/nf_conntrack_standalone.c | 2 +-
> net/netfilter/nfnetlink_queue.c | 2 +-
> net/netlabel/netlabel_unlabeled.c | 11 ++++--
> net/netlabel/netlabel_user.c | 2 +-
> net/xfrm/xfrm_policy.c | 2 +
> net/xfrm/xfrm_state.c | 2 +
> security/integrity/ima/ima_api.c | 1 +
> security/integrity/integrity_audit.c | 1 +
> security/security.c | 51 +++++++++++++++++++++++--
> 19 files changed, 124 insertions(+), 23 deletions(-)

I'm not in love with some of the naming choices, but considering none
of it is visible to userspace it isn't worth worrying about.

Acked-by: Paul Moore <paul@paul-moore.com>

--
paul moore