Re: [PATCH ghak47 V1] audit: normalize MAC_POLICY_LOAD record

2018-04-15 Thread Paul Moore
On Mon, Apr 9, 2018 at 7:36 PM, Richard Guy Briggs wrote: > The audit MAC_POLICY_LOAD record had redundant dangling keywords and was > missing information about which LSM was responsible and its completion > status. While this record is only issued on success, the parser expects

Re: [PATCH ghak46 V1] audit: normalize MAC_STATUS record

2018-04-15 Thread Paul Moore
On Mon, Apr 9, 2018 at 7:34 PM, Richard Guy Briggs wrote: > There were two formats of the audit MAC_STATUS record, one of which was more > standard than the other. One listed enforcing status changes and the > other listed enabled status changes with a non-standard label. In >