Messages in this thread Patch in this message | | | Subject | [PATCH 3/6] Audit task comm if exe cannot be determined | From | Stephen Smalley <> | Date | Thu, 02 Dec 2004 10:41:43 -0500 |
| |
This patch for 2.6.10-rc2-mm4 ensures that the comm is included in the audit message if avc_audit is unable to determine the exe due to the mmap_sem being held. This is helpful in tracking down the causes of permission denials that occur in the mmap/mprotect hooks.
Signed-off-by: Stephen Smalley <sds@epoch.ncsc.mil> Signed-off-by: James Morris <jmorris@redhat.com>
security/selinux/avc.c | 2 ++ 1 files changed, 2 insertions(+)
--- linux-2.6.10-rc2-mm4/security/selinux/avc.c.orig 2004-12-01 13:02:56.299974456 -0500 +++ linux-2.6.10-rc2-mm4/security/selinux/avc.c 2004-12-01 13:25:15.445393408 -0500 @@ -566,6 +566,8 @@ void avc_audit(u32 ssid, u32 tsid, vma = vma->vm_next; } up_read(&mm->mmap_sem); + } else { + audit_log_format(ab, " comm=%s", tsk->comm); } if (tsk != current) mmput(mm); -- Stephen Smalley <sds@epoch.ncsc.mil> National Security Agency
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |