Re: monitoring deletion of directories?

2015-10-08 Thread Steve Grubb
On Thursday, October 08, 2015 01:32:16 PM Bond Masuda wrote: > with linux audit, how do I monitor the deletion of directories? I am > already monitoring the unlink syscall, but it only seems to monitor > deleted files. There is a rmdir syscall. Add that to your rule. -Steve -- Linux-audit mailin

monitoring deletion of directories?

2015-10-08 Thread Bond Masuda
with linux audit, how do I monitor the deletion of directories? I am already monitoring the unlink syscall, but it only seems to monitor deleted files. thanks Bond -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit

Re: [RFC PATCH v3 5/5] selinux: introduce kdbus access controls

2015-10-08 Thread Paul Moore
On Wednesday, October 07, 2015 07:08:48 PM Paul Moore wrote: > +static int selinux_kdbus_conn_see_notification(const struct cred *creds) > +{ > + return avc_has_perm(SECINITSID_KERNEL, cred_sid(creds), > + SECCLASS_KDBUS, KDBUS__SEE_NOTIFICATION, NULL); > +} I'm