Re: [PATCH 2/2] audit: log binding and unbinding to netlink multicast socket

2015-07-24 Thread Paul Moore
On Thursday, July 23, 2015 04:45:19 PM Steve Grubb wrote: > Log information about programs connecting and disconnecting to the audit > netlink multicast socket. This is needed so that during investigations a > security officer can tell who or what had access to the audit trail. This > helps to meet

[PATCH 2/2] audit: log binding and unbinding to netlink multicast socket

2015-07-23 Thread Steve Grubb
Log information about programs connecting and disconnecting to the audit netlink multicast socket. This is needed so that during investigations a security officer can tell who or what had access to the audit trail. This helps to meet the FAU_SAR.2 requirement for Common Criteria. Signed-off-by: St