linux/security/selinux
Casey Schaufler 0ffbc876d0 audit: add record for multiple object contexts
Create a new audit record AUDIT_MAC_OBJ_CONTEXTS.
An example of the MAC_OBJ_CONTEXTS record is:

    type=MAC_OBJ_CONTEXTS
      msg=audit(1601152467.009:1050):
      obj_selinux=unconfined_u:object_r:user_home_t:s0

When an audit event includes a AUDIT_MAC_OBJ_CONTEXTS record
the "obj=" field in other records in the event will be "obj=?".
An AUDIT_MAC_OBJ_CONTEXTS record is supplied when the system has
multiple security modules that may make access decisions based
on an object security context.

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
[PM: subj tweak, audit example readability indents]
Signed-off-by: Paul Moore <paul@paul-moore.com>
2025-08-30 10:15:30 -04:00
..
include selinux: optimize selinux_inode_getattr/permission() based on neveraudit|permissive 2025-06-19 17:23:05 -04:00
ss selinux/stable-6.17 PR 20250725 2025-07-28 18:25:57 -07:00
.gitignore selinux: move genheaders to security/selinux/ 2024-10-03 16:07:51 -04:00
avc.c selinux: fix spelling error 2025-02-03 16:47:20 -05:00
genheaders.c selinux: move genheaders to security/selinux/ 2024-10-03 16:07:51 -04:00
hooks.c audit: add record for multiple object contexts 2025-08-30 10:15:30 -04:00
ibpkey.c selinux: unify OOM handling in network hashtables 2025-04-11 16:29:51 -04:00
ima.c selinux: adjust typos in comments 2023-05-08 16:44:01 -04:00
Kconfig selinux: improve debug configuration 2023-09-13 13:46:57 -04:00
Makefile selinux: add generated av_permissions.h to targets 2024-12-11 13:42:35 -05:00
netif.c selinux: unify OOM handling in network hashtables 2025-04-11 16:29:51 -04:00
netlabel.c lsm/stable-6.12 PR 20240911 2024-09-16 18:19:47 +02:00
netlink.c selinux: mark some global variables __ro_after_init 2021-01-12 10:08:55 -05:00
netnode.c selinux: unify OOM handling in network hashtables 2025-04-11 16:29:51 -04:00
netport.c selinux: drop copy-paste comment 2025-04-11 16:32:07 -04:00
nlmsgtab.c net: Retire DCCP socket. 2025-04-11 18:58:10 -07:00
selinuxfs.c selinux: don't bother with selinuxfs_info_free() on failures 2025-06-24 19:39:28 -04:00
status.c selinux: avoid implicit conversions regarding enforcing status 2023-07-18 18:29:50 -04:00
xfrm.c selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len 2025-06-16 19:02:22 -04:00