tree 7e2848792982dfe30e19a600a41fa5cb49ee6e6e
parent 97e94c453073a2aba4bb5e0825ddc5e923debf11
author Darrel Goeddel <dgoeddel@trustedcs.com> 1140817445 -0600
committer Al Viro <viro@zeniv.linux.org.uk> 1146477984 -0400

[PATCH] support for context based audit filtering

The following patch provides selinux interfaces that will allow the audit
system to perform filtering based on the process context (user, role, type,
sensitivity, and clearance).  These interfaces will allow the selinux
module to perform efficient matches based on lower level selinux constructs,
rather than relying on context retrievals and string comparisons within
the audit module.  It also allows for dominance checks on the mls portion
of the contexts that are impossible with only string comparisons.

Signed-off-by: Darrel Goeddel <dgoeddel@trustedcs.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>