security: report the module name to security_module_request
For SELinux to do better filtering in userspace we send the name of the module along with the AVC denial when a program is denied module_request. Example output: type=SYSCALL msg=audit(11/03/2009 10:59:43.510:9) : arch=x86_64 syscall=write success=yes exit=2 a0=3 a1=7fc28c0d56c0 a2=2 a3=7fffca0d7440 items=0 ppid=1727 pid=1729 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=rpc.nfsd exe=/usr/sbin/rpc.nfsd subj=system_u:system_r:nfsd_t:s0 key=(null) type=AVC msg=audit(11/03/2009 10:59:43.510:9) : avc: denied { module_request } for pid=1729 comm=rpc.nfsd kmod="net-pf-10" scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system Signed-off-by:Eric Paris <eparis@redhat.com> Signed-off-by:
James Morris <jmorris@namei.org>
Showing
- include/linux/lsm_audit.h 10 additions, 8 deletionsinclude/linux/lsm_audit.h
- include/linux/security.h 4 additions, 3 deletionsinclude/linux/security.h
- kernel/kmod.c 4 additions, 4 deletionskernel/kmod.c
- security/capability.c 1 addition, 1 deletionsecurity/capability.c
- security/lsm_audit.c 4 additions, 0 deletionssecurity/lsm_audit.c
- security/security.c 2 additions, 2 deletionssecurity/security.c
- security/selinux/hooks.c 11 additions, 2 deletionssecurity/selinux/hooks.c
Loading
Please register or sign in to comment