[PATCH ghak109 V1] audit: link integrity evm_write_xattrs record to syscall event
mjg59 at google.com
Tue Mar 26 17:55:57 UTC 2019
On Tue, Mar 26, 2019 at 10:43 AM Richard Guy Briggs <rgb at redhat.com> wrote:
> Ok, what I typed above wasn't quite what I intended... This is what I
> audit_log_format(ab, "xattr=");
> audit_log_untrustedstring(ab, ".");
> But, I'll just move the normal case above the "." locking detection and
> log all cases the same way.
Sounds good to me.
More information about the Linux-security-module-archive