>I don't see anything about integration with the linux audit system. >Anything deciding access control or information flow decisions normally >needs to be auditable.
Hi Steve Audit logging is on our radar, and in fact the prototype BPF LSM code already sends events to userspace, which right now are printed. The plan was always to hook this into auditd; that this wasn't in the proposal text was simply an oversight. I'll ping you offline about the best way to do this, and hopefully you can also provide some guidance on what granularity of events it makes sense to send, etc. -Toke -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
