[PATCH v3 4/5] Audit: multiple subject lsm values for netlabel

Casey Schaufler casey at schaufler-ca.com
Wed Apr 30 16:25:22 UTC 2025


On 4/24/2025 3:18 PM, Paul Moore wrote:
> On Mar 19, 2025 Casey Schaufler <casey at schaufler-ca.com> wrote:
>> Refactor audit_log_task_context(), creating a new audit_log_subj_ctx().
>> This is used in netlabel auditing to provide multiple subject security
>> contexts as necessary.
>>
>> Signed-off-by: Casey Schaufler <casey at schaufler-ca.com>
>> ---
>>  include/linux/audit.h        |  7 +++++++
>>  kernel/audit.c               | 28 +++++++++++++++++++++-------
>>  net/netlabel/netlabel_user.c |  9 +--------
>>  3 files changed, 29 insertions(+), 15 deletions(-)
> Other than moving to the subject count supplied by the LSM
> initialization patchset previously mentioned, this looks fine to me.

I'm perfectly willing to switch once the LSM initialization patch set
moves past RFC.

>
> --
> paul-moore.com
>



More information about the Linux-security-module-archive mailing list