Stephen Smalley ca7786a2f9 selinux: Report permissive mode in avc: denied messages. ...

We cannot presently tell from an avc: denied message whether access was in
fact denied or was allowed due to global or per-domain permissive mode.
Add a permissive= field to the avc message to reflect this information.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Acked-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Paul Moore <pmoore@redhat.com>

2014-06-03 14:21:48 -05:00

20 KiB

Raw Blame History

View Raw