]> git.ipfire.org Git - thirdparty/libvirt.git/commit
Audit SELinux label assignment.
authorMiloslav Trmač <mitr@redhat.com>
Tue, 12 Oct 2010 11:23:55 +0000 (12:23 +0100)
committerDaniel P. Berrange <berrange@redhat.com>
Tue, 19 Oct 2010 16:31:31 +0000 (17:31 +0100)
commitb8e2de8899594edcd78b3a7cb1b39b89bbed2891
treebaa2f49ccb9f111d3618ffd525ceabc7e43b2db5
parenta8b5f9bd27d65c2ced064b9267ca31dee7ad9c86
Audit SELinux label assignment.

A more natural auditing point would perhaps be
SELinuxSetSecurityProcessLabel, but this happens in the child after root
permissions are dropped, so the kernel would refuse the audit record.
src/security/security_selinux.c