Re: [PATCH v20 20/23] Audit: Add new record for multiple process LSM attributes

2020-09-03 Thread Paul Moore
On Thu, Sep 3, 2020 at 12:32 PM James Morris wrote: > On Wed, 26 Aug 2020, Casey Schaufler wrote: > > > Create a new audit record type to contain the subject information > > when there are multiple security modules that require such data. > > This record is linked with the same timestamp and seria

Re: [PATCH v20 20/23] Audit: Add new record for multiple process LSM attributes

2020-09-03 Thread John Johansen
On 9/3/20 9:32 AM, James Morris wrote: > On Wed, 26 Aug 2020, Casey Schaufler wrote: > >> Create a new audit record type to contain the subject information >> when there are multiple security modules that require such data. >> This record is linked with the same timestamp and serial number. >> The

Re: [PATCH v20 20/23] Audit: Add new record for multiple process LSM attributes

2020-09-03 Thread James Morris
On Wed, 26 Aug 2020, Casey Schaufler wrote: > Create a new audit record type to contain the subject information > when there are multiple security modules that require such data. > This record is linked with the same timestamp and serial number. > The record is produced only in cases where there i

Re: [PATCH v20 05/23] net: Prepare UDS for security module stacking

2020-09-03 Thread James Morris
On Wed, 26 Aug 2020, Casey Schaufler wrote: > Change the data used in UDS SO_PEERSEC processing from a > secid to a more general struct lsmblob. Update the > security_socket_getpeersec_dgram() interface to use the > lsmblob. There is a small amount of scaffolding code > that will come out when the