On Friday, July 28, 2017 9:06:34 AM EDT Stephen Smalley wrote:
On Fri, 2017-07-28 at 03:23 -0400, Richard Guy Briggs wrote:
> In the process of normalizing audit log messages, it was noticed that
> the AVC
> initialization code registered an audit log KERNEL record that didn't
> fit the
> standard format. In the process of attempting to normalize it it was
> determined that this record was not even necessary. Remove it.
>
> Ref:
http://marc.info/?l=selinux&m=149614868525826&w=2
> See:
https://github.com/linux-audit/audit-kernel/issues/48
> Signed-off-by: Richard Guy Briggs <rgb(a)redhat.com>
Acked-by: Stephen Smalley <sds(a)tycho.nsa.gov>
Yeah, I guess it can be deleted.
Acked-by: Steve Grubb <sgrubb(a)redhat.com>
> ---
> security/selinux/avc.c | 2 --
> 1 files changed, 0 insertions(+), 2 deletions(-)
>
> diff --git a/security/selinux/avc.c b/security/selinux/avc.c
> index e60c79d..4b42931 100644
> --- a/security/selinux/avc.c
> +++ b/security/selinux/avc.c
> @@ -197,8 +197,6 @@ void __init avc_init(void)
> avc_xperms_data_cachep =
> kmem_cache_create("avc_xperms_data",
> sizeof(struct
> extended_perms_data),
> 0, SLAB_PANIC, NULL);
> -
> - audit_log(current->audit_context, GFP_KERNEL, AUDIT_KERNEL,
> "AVC INITIALIZED\n");
> }
>
> int avc_get_hash_stats(char *page)