• Amy Griffis's avatar
    [PATCH] audit signal recipients · e54dc243
    Amy Griffis authored
    When auditing syscalls that send signals, log the pid and security
    context for each target process. Optimize the data collection by
    adding a counter for signal-related rules, and avoiding allocating an
    aux struct unless we have more than one target process. For process
    groups, collect pid/context data in blocks of 16. Move the
    audit_signal_info() hook up in check_kill_permission() so we audit
    attempts where permission is denied.
    Signed-off-by: default avatarAmy Griffis <amy.griffis@hp.com>
    Signed-off-by: default avatarAl Viro <viro@zeniv.linux.org.uk>
    e54dc243
audit.h 4.79 KB