git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a2f2945) | patch
Currently SELinux jumps through some ugly hoops to not audit a capbility
authorEric Paris <eparis@redhat.com>
Tue, 11 Nov 2008 11:02:57 +0000 (22:02 +1100)
committerJames Morris <jmorris@namei.org>
Tue, 11 Nov 2008 11:02:57 +0000 (22:02 +1100)
commit066746796bd2f0a1ba210c0dded3b6ee4032692a
tree868832ca0e199e4f173e23375cffb5fc3870402ctree | snapshot
parenta2f2945a99057c7d44043465906c6bb63c3368a0commit | diff
Currently SELinux jumps through some ugly hoops to not audit a capbility
check when determining if a process has additional powers to override
memory limits or when trying to read/write illegal file labels.  Use
the new noaudit call instead.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>
security/selinux/hooks.c diff | blob | history
Full containers within linux kernel