[PATCH] libselinux: Add permissive= entry to avc audit log

2017-04-26 Thread Richard Haines
Add audit log entry to specify whether the decision was made in permissive mode/permissive domain or enforcing mode. There are two utilities for testing: utils/avc_has_perm - This can set the AVC mode to follow SELinux, set AVC permissive, or set AVC enforcing. utils/selinux_check_access - This f

Re: [PATCH] libselinux: Add permissive= entry to avc audit log

2017-04-27 Thread Stephen Smalley
On Wed, 2017-04-26 at 14:47 +0100, Richard Haines wrote: > Add audit log entry to specify whether the decision was made in > permissive mode/permissive domain or enforcing mode. > > There are two utilities for testing: > utils/avc_has_perm - This can set the AVC mode to follow SELinux, set > AVC p

Re: [PATCH] libselinux: Add permissive= entry to avc audit log

2017-05-01 Thread Richard Haines
On Thu, 2017-04-27 at 10:34 -0400, Stephen Smalley wrote: > On Wed, 2017-04-26 at 14:47 +0100, Richard Haines wrote: > > Add audit log entry to specify whether the decision was made in > > permissive mode/permissive domain or enforcing mode. > > > > There are two utilities for testing: > > utils/a