tree cd42581516bc189c2e1d83b15fad984c7001561c
parent 2d10d8737ccdba752d60106abbc6ed4f37404923
author Miloslav Trmac <mitr@redhat.com> 1284675251 -0400
committer Al Viro <viro@zeniv.linux.org.uk> 1288417317 -0400

Audit: add support to match lsm labels on user audit messages

Add support for matching by security label (e.g. SELinux context) of
the sender of an user-space audit record.

The audit filter code already allows user space to configure such
filters, but they were ignored during evaluation.  This patch implements
evaluation of these filters.

For example, after application of this patch, PAM authentication logs
caused by cron can be disabled using
	auditctl -a user,never -F subj_type=crond_t

Signed-off-by: Miloslav Trmac <mitr@redhat.com>
Acked-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>