On 4/24/2025 3:18 PM, Paul Moore wrote:

On Mar 19, 2025 Casey Schaufler [off-list ref] wrote:

quoted

Refactor audit_log_task_context(), creating a new audit_log_subj_ctx().
This is used in netlabel auditing to provide multiple subject security
contexts as necessary.

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
---
 include/linux/audit.h        |  7 +++++++
 kernel/audit.c               | 28 +++++++++++++++++++++-------
 net/netlabel/netlabel_user.c |  9 +--------
 3 files changed, 29 insertions(+), 15 deletions(-)

Other than moving to the subject count supplied by the LSM
initialization patchset previously mentioned, this looks fine to me.

I'm perfectly willing to switch once the LSM initialization patch set
moves past RFC.

--
paul-moore.com