1
0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-01-12 09:32:12 +00:00
Casey Schaufler 0ffbc876d0 audit: add record for multiple object contexts
Create a new audit record AUDIT_MAC_OBJ_CONTEXTS.
An example of the MAC_OBJ_CONTEXTS record is:

    type=MAC_OBJ_CONTEXTS
      msg=audit(1601152467.009:1050):
      obj_selinux=unconfined_u:object_r:user_home_t:s0

When an audit event includes a AUDIT_MAC_OBJ_CONTEXTS record
the "obj=" field in other records in the event will be "obj=?".
An AUDIT_MAC_OBJ_CONTEXTS record is supplied when the system has
multiple security modules that may make access decisions based
on an object security context.

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
[PM: subj tweak, audit example readability indents]
Signed-off-by: Paul Moore <paul@paul-moore.com>
2025-08-30 10:15:30 -04:00
..
2025-07-31 16:04:19 -07:00
2025-07-30 17:14:01 -07:00
2025-07-11 16:02:01 +02:00
2025-07-30 19:26:49 -07:00
2025-08-04 10:54:36 -07:00
2025-07-31 16:29:46 -07:00
2025-07-31 16:52:32 -07:00
2025-08-30 10:15:28 -04:00
2025-08-06 07:32:52 +03:00
2025-06-13 17:26:17 +08:00
2025-07-29 21:43:08 -07:00
2024-11-03 01:28:06 -05:00
2025-02-12 12:12:27 +01:00
2025-03-24 09:52:37 -07:00
2025-07-31 15:40:22 -07:00