On Thursday, October 08, 2015 01:32:16 PM Bond Masuda wrote:
> with linux audit, how do I monitor the deletion of directories? I am
> already monitoring the unlink syscall, but it only seems to monitor
> deleted files.
There is a rmdir syscall. Add that to your rule.
-Steve
--
Linux-audit mailin
with linux audit, how do I monitor the deletion of directories? I am
already monitoring the unlink syscall, but it only seems to monitor
deleted files.
thanks
Bond
--
Linux-audit mailing list
Linux-audit@redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit
On Wednesday, October 07, 2015 07:08:48 PM Paul Moore wrote:
> +static int selinux_kdbus_conn_see_notification(const struct cred *creds)
> +{
> + return avc_has_perm(SECINITSID_KERNEL, cred_sid(creds),
> + SECCLASS_KDBUS, KDBUS__SEE_NOTIFICATION, NULL);
> +}
I'm