Re: [PATCH v4 2/2] selinux: add basic filtering for audit trace events

2020-08-21 Thread Paul Moore
On Fri, Aug 21, 2020 at 10:09 AM Thiébaud Weksteen wrote: > > From: Peter Enderborg > > This patch adds further attributes to the event. These attributes are > helpful to understand the context of the message and can be used > to filter the events. > > There are three common items. Source

Re: [PATCH v4 2/2] selinux: add basic filtering for audit trace events

2020-08-21 Thread Stephen Smalley
On Fri, Aug 21, 2020 at 10:09 AM Thiébaud Weksteen wrote: > > From: Peter Enderborg > > This patch adds further attributes to the event. These attributes are > helpful to understand the context of the message and can be used > to filter the events. > > There are three common items. Source

[PATCH v4 2/2] selinux: add basic filtering for audit trace events

2020-08-21 Thread Thiébaud Weksteen
From: Peter Enderborg This patch adds further attributes to the event. These attributes are helpful to understand the context of the message and can be used to filter the events. There are three common items. Source context, target context and tclass. There are also items from the outcome of