Re: [patch 1/1] SELinux AVC audit log ipaddr field support (for task_struct->curr_ip)

2005-03-10 Thread Steve Grubb
On Thursday 10 March 2005 10:16, Stephen Smalley wrote: > (e.g. the exe= information currently generated by avc_audit could be done > by audit_log_exit instead). I already have a patch that does that. It tells you what program is being run instead of /bin/bash. I'll send it in a day or two for

Re: [patch 1/1] SELinux AVC audit log ipaddr field support (for task_struct->curr_ip)

2005-03-10 Thread Stephen Smalley
On Thu, 2005-03-10 at 16:05 +0100, Lorenzo HernÃndez GarcÃa-Hierro wrote: > Provides support for a new field ipaddr within the SELinux > AVC audit log, relying in task_struct->curr_ip (ipv4 only) > provided by the task-curr_ip or grSecurity patch to be applied > before.It was first implemented by

[patch 1/1] SELinux AVC audit log ipaddr field support (for task_struct->curr_ip)

2005-03-10 Thread Lorenzo Hernández García-Hierro
Provides support for a new field ipaddr within the SELinux AVC audit log, relying in task_struct->curr_ip (ipv4 only) provided by the task-curr_ip or grSecurity patch to be applied before.It was first implemented by Joshua Brindle (a.k.a Method) from the Hardened Gentoo project. An example of the

[patch 1/1] SELinux AVC audit log ipaddr field support (for task_struct-curr_ip)

2005-03-10 Thread Lorenzo Hernández García-Hierro
Provides support for a new field ipaddr within the SELinux AVC audit log, relying in task_struct-curr_ip (ipv4 only) provided by the task-curr_ip or grSecurity patch to be applied before.It was first implemented by Joshua Brindle (a.k.a Method) from the Hardened Gentoo project. An example of the

Re: [patch 1/1] SELinux AVC audit log ipaddr field support (for task_struct-curr_ip)

2005-03-10 Thread Stephen Smalley
On Thu, 2005-03-10 at 16:05 +0100, Lorenzo Hernndez Garca-Hierro wrote: Provides support for a new field ipaddr within the SELinux AVC audit log, relying in task_struct-curr_ip (ipv4 only) provided by the task-curr_ip or grSecurity patch to be applied before.It was first implemented by Joshua

Re: [patch 1/1] SELinux AVC audit log ipaddr field support (for task_struct-curr_ip)

2005-03-10 Thread Steve Grubb
On Thursday 10 March 2005 10:16, Stephen Smalley wrote: (e.g. the exe= information currently generated by avc_audit could be done by audit_log_exit instead). I already have a patch that does that. It tells you what program is being run instead of /bin/bash. I'll send it in a day or two for