From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mr Dash Four Subject: Re: [PATCH 2nd revision] Add SELinux context support to AUDIT target Date: Mon, 06 Jun 2011 13:42:15 +0100 Message-ID: <4DECCB27.6040706@googlemail.com> References: <4DDE9194.4030303@netfilter.org> <201106060814.12524.sgrubb@redhat.com> <4DECC754.6040003@googlemail.com> <201106060830.52644.sgrubb@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <201106060830.52644.sgrubb@redhat.com> Sender: netfilter-devel-owner@vger.kernel.org To: Steve Grubb Cc: linux-audit@redhat.com, netfilter-devel@vger.kernel.org, Thomas Graf , Al Viro , Eric Paris , Patrick McHardy , Pablo Neira Ayuso List-Id: linux-audit@redhat.com > This is not any more leak than leaking the context string to user space as this patch > attempts to do. The rest of the audit code does log the numeric representation when > text fails. > There is no "leak" when the secctx is recorded in the audit log - it is supposed to be there, if present (and retrievable). As for exposing the (internal) numerical representation of the secctx - this was discussed previously and the approach you are suggesting was dropped. To quote Eric on this very issue "[It] exports the internal secid to userspace. These are dynamic, can change on lsm changes, and have no meaning in userspace. We should instead be sending lsm contexts to userspace instead.".