diff options
| author | Etienne Basset <etienne.basset@numericable.fr> | 2009-04-08 20:40:06 +0200 |
|---|---|---|
| committer | James Morris <jmorris@namei.org> | 2009-04-14 09:00:23 +1000 |
| commit | ecfcc53fef3c357574bb6143dce6631e6d56295c (patch) | |
| tree | d7bee04b64c5ad2ba0ed273bff2c8c7c98b3eee5 /security/Makefile | |
| parent | 6e837fb152410e571a81aaadbd9884f0bc46a55e (diff) | |
| download | kernel_samsung_smdk4412-ecfcc53fef3c357574bb6143dce6631e6d56295c.zip kernel_samsung_smdk4412-ecfcc53fef3c357574bb6143dce6631e6d56295c.tar.gz kernel_samsung_smdk4412-ecfcc53fef3c357574bb6143dce6631e6d56295c.tar.bz2 | |
smack: implement logging V3
the following patch, add logging of Smack security decisions.
This is of course very useful to understand what your current smack policy does.
As suggested by Casey, it also now forbids labels with ', " or \
It introduces a '/smack/logging' switch :
0: no logging
1: log denied (default)
2: log accepted
3: log denied&accepted
Signed-off-by: Etienne Basset <etienne.basset@numericable.fr>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>
Acked-by: Eric Paris <eparis@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>
Diffstat (limited to 'security/Makefile')
| -rw-r--r-- | security/Makefile | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/security/Makefile b/security/Makefile index fa77021..c67557c 100644 --- a/security/Makefile +++ b/security/Makefile @@ -16,6 +16,9 @@ obj-$(CONFIG_SECURITYFS) += inode.o # Must precede capability.o in order to stack properly. obj-$(CONFIG_SECURITY_SELINUX) += selinux/built-in.o obj-$(CONFIG_SECURITY_SMACK) += smack/built-in.o +ifeq ($(CONFIG_AUDIT),y) +obj-$(CONFIG_SECURITY_SMACK) += lsm_audit.o +endif obj-$(CONFIG_SECURITY_TOMOYO) += tomoyo/built-in.o obj-$(CONFIG_SECURITY_ROOTPLUG) += root_plug.o obj-$(CONFIG_CGROUP_DEVICE) += device_cgroup.o |