[PATCH v2 3/4] seccomp: Audit attempts to modify the actions_logged sysctl
From: jmorris@namei.org (James Morris)
Date: 2018-05-02 21:17:44
Also in:
linux-doc, lkml
On Wed, 2 May 2018, Tyler Hicks wrote:
type=CONFIG_CHANGE msg=audit(1525275325.613:142): op=seccomp-logging actions=kill_process,kill_thread,errno,trace,log old-actions=kill_process,kill_thread,errno,trace,log res=1 No audit records are generated when reading the actions_logged sysctl. Suggested-by: Steve Grubb <redacted> Signed-off-by: Tyler Hicks <redacted>
Reviewed-by: James Morris <redacted> -- James Morris [off-list ref] -- To unsubscribe from this list: send the line "unsubscribe linux-security-module" in the body of a message to majordomo at vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html