smack: implement logging V3
authorEtienne Basset <etienne.basset@numericable.fr>
Wed, 8 Apr 2009 18:40:06 +0000 (20:40 +0200)
committerJames Morris <jmorris@namei.org>
Mon, 13 Apr 2009 23:00:23 +0000 (09:00 +1000)
commitecfcc53fef3c357574bb6143dce6631e6d56295c
treed7bee04b64c5ad2ba0ed273bff2c8c7c98b3eee5
parent6e837fb152410e571a81aaadbd9884f0bc46a55e
smack: implement logging V3

the following patch, add logging of Smack security decisions.
This is of course very useful to understand what your current smack policy does.
As suggested by Casey, it also now forbids labels with ', " or \

It introduces a '/smack/logging' switch :
0: no logging
1: log denied (default)
2: log accepted
3: log denied&accepted

Signed-off-by: Etienne Basset <etienne.basset@numericable.fr>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>
Acked-by: Eric Paris <eparis@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>
Documentation/Smack.txt
security/Makefile
security/smack/smack.h
security/smack/smack_access.c
security/smack/smack_lsm.c
security/smack/smackfs.c