Re: [apparmor] Unique audit record type ranges for individual LSMs

2017-12-11 Thread Steve Grubb
On Monday, December 11, 2017 3:56:35 PM EST Casey Schaufler wrote: > On 12/11/2017 7:44 AM, Steve Grubb wrote: > > On Wednesday, December 6, 2017 1:47:43 PM EST Casey Schaufler wrote: > >>> While it will be potentially painful to switch, the AppArmor project is > >>> considering to use a unique

Re: [apparmor] Unique audit record type ranges for individual LSMs

2017-12-11 Thread Casey Schaufler
On 12/11/2017 7:44 AM, Steve Grubb wrote: > On Wednesday, December 6, 2017 1:47:43 PM EST Casey Schaufler wrote: >>> While it will be potentially painful to switch, the AppArmor project is >>> considering to use a unique range in order for audit-userspace to >>> support AppArmor audit records.

Re: [apparmor] Unique audit record type ranges for individual LSMs

2017-12-11 Thread Steve Grubb
On Wednesday, December 6, 2017 12:51:26 PM EST Tyler Hicks wrote: > Hello - The AppArmor project would like for AppArmor audit records to be > supported by the audit-userspace tools, such as ausearch, but it > requires some coordination between the linux-security-module and > linux-audit lists.

Re: [apparmor] Unique audit record type ranges for individual LSMs

2017-12-11 Thread Steve Grubb
On Wednesday, December 6, 2017 1:47:43 PM EST Casey Schaufler wrote: > > While it will be potentially painful to switch, the AppArmor project is > > considering to use a unique range in order for audit-userspace to > > support AppArmor audit records. IMHO, SMACK would be free to continue > > using

Re: [apparmor] Unique audit record type ranges for individual LSMs

2017-12-06 Thread Tyler Hicks
On 12/06/2017 12:47 PM, Casey Schaufler wrote: > On 12/6/2017 9:51 AM, Tyler Hicks wrote: >> Hello - The AppArmor project would like for AppArmor audit records to be >> supported by the audit-userspace tools, such as ausearch, but it >> requires some coordination between the linux-security-module

Re: [apparmor] Unique audit record type ranges for individual LSMs

2017-12-06 Thread Casey Schaufler
On 12/6/2017 9:51 AM, Tyler Hicks wrote: > Hello - The AppArmor project would like for AppArmor audit records to be > supported by the audit-userspace tools, such as ausearch, but it > requires some coordination between the linux-security-module and > linux-audit lists. This was raised as a

[apparmor] Unique audit record type ranges for individual LSMs

2017-12-06 Thread Tyler Hicks
Hello - The AppArmor project would like for AppArmor audit records to be supported by the audit-userspace tools, such as ausearch, but it requires some coordination between the linux-security-module and linux-audit lists. This was raised as a feature request years ago in Ubuntu and more recently