1
0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-01-12 01:20:14 +00:00
Casey Schaufler 0ffbc876d0 audit: add record for multiple object contexts
Create a new audit record AUDIT_MAC_OBJ_CONTEXTS.
An example of the MAC_OBJ_CONTEXTS record is:

    type=MAC_OBJ_CONTEXTS
      msg=audit(1601152467.009:1050):
      obj_selinux=unconfined_u:object_r:user_home_t:s0

When an audit event includes a AUDIT_MAC_OBJ_CONTEXTS record
the "obj=" field in other records in the event will be "obj=?".
An AUDIT_MAC_OBJ_CONTEXTS record is supplied when the system has
multiple security modules that may make access decisions based
on an object security context.

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
[PM: subj tweak, audit example readability indents]
Signed-off-by: Paul Moore <paul@paul-moore.com>
2025-08-30 10:15:30 -04:00
..
2025-02-08 15:16:29 +00:00
2025-04-02 18:23:31 -07:00
2025-07-16 18:38:05 -07:00
2025-02-05 13:22:04 +09:00
2025-03-25 11:30:42 -07:00
2025-02-12 02:29:30 +00:00
2025-06-24 16:58:42 +02:00
2025-07-28 15:24:14 -07:00
2025-05-03 12:02:09 +02:00
2025-07-14 09:15:58 +02:00
2025-07-29 12:27:40 -04:00
2025-04-17 11:09:10 +02:00
2025-07-08 12:39:24 +02:00
2025-04-17 12:30:02 +02:00
2025-06-24 15:50:06 +02:00
2025-07-29 20:21:54 -07:00
2025-02-25 18:14:03 -08:00
2025-07-14 18:41:42 -07:00
2025-06-19 14:28:22 +02:00
2025-05-21 13:41:03 +02:00
2025-04-17 12:30:02 +02:00
2025-08-01 14:17:48 -07:00
2025-05-27 10:27:54 -04:00