Re: [PATCH] Fix audit control message checks

2005-01-18 Thread Chris Wright
* Stephen Smalley ([EMAIL PROTECTED]) wrote: > On Sat, 2005-01-15 at 15:07, Serge E. Hallyn wrote: > > The audit control messages are sent over netlink. Permission checks > > are done on the process receiving the message, which may not be the > > same as the process sending the message. This patc

Re: [PATCH] Fix audit control message checks

2005-01-18 Thread Stephen Smalley
On Sat, 2005-01-15 at 15:07, Serge E. Hallyn wrote: > The audit control messages are sent over netlink. Permission checks > are done on the process receiving the message, which may not be the > same as the process sending the message. This patch switches the > netlink_send security hooks to calcu

[PATCH] Fix audit control message checks

2005-01-15 Thread Serge E. Hallyn
The audit control messages are sent over netlink. Permission checks are done on the process receiving the message, which may not be the same as the process sending the message. This patch switches the netlink_send security hooks to calculate the effective capabilities based on the sender. Then a