tree 926957e904739fc6c29e5125b7c1635b9f77548c
parent 376bd9cb357ec945ac893feaeb63af7370a6e70b
author Darrel Goeddel <dgoeddel@trustedcs.com> 1142036046 -0600
committer Al Viro <viro@zeniv.linux.org.uk> 1146478176 -0400

[PATCH] support for context based audit filtering, part 2

This patch provides the ability to filter audit messages based on the
elements of the process' SELinux context (user, role, type, mls sensitivity,
and mls clearance).  It uses the new interfaces from selinux to opaquely
store information related to the selinux context and to filter based on that
information.  It also uses the callback mechanism provided by selinux to
refresh the information when a new policy is loaded.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>