On Fri, 2005-05-20 at 13:26 -0400, Stephen Smalley wrote:
This patch changes the SELinux AVC to defer logging of paths to the audit
framework upon syscall exit, by saving a reference to the (dentry,vfsmount)
pair in an auxiliary audit item on the current audit context for processing
by audit_log_exit.
Signed-off-by: Stephen Smalley <sds(a)tycho.nsa.gov>
Applied; thanks.
--
dwmw2