Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1757260AbXFMUCk (ORCPT ); Wed, 13 Jun 2007 16:02:40 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1753567AbXFMUCd (ORCPT ); Wed, 13 Jun 2007 16:02:33 -0400 Received: from mx1.redhat.com ([66.187.233.31]:42760 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752206AbXFMUCc (ORCPT ); Wed, 13 Jun 2007 16:02:32 -0400 Message-ID: <46704D49.8010308@redhat.com> Date: Wed, 13 Jun 2007 16:02:17 -0400 From: Rik van Riel User-Agent: Thunderbird 1.5.0.7 (X11/20061004) MIME-Version: 1.0 To: Toshiharu Harada CC: Stephen Smalley , Toshiharu Harada , linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org Subject: Re: [RFC] TOMOYO Linux References: <466FA71C.1020309@nttdata.co.jp> <1181743635.17547.350.camel@moss-spartans.epoch.ncsc.mil> <9d732d950706130722g12a22604p223381a8e281a4a1@mail.gmail.com> In-Reply-To: <9d732d950706130722g12a22604p223381a8e281a4a1@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 646 Lines: 19 Toshiharu Harada wrote: > So I think pathname based call chains are advantages for > at least auditing and profiling. SELinux audit logs (well, whatever is in /var/log/audit on my system) does show the path names of objects that fail to be accessed as well as the name and context of the processes trying to access them. This is with standard Fedora and RHEL installations. -- All Rights Reversed - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/