RFE: log the policy capability state when a new policy is loaded into the kernel

SELinuxProject / selinux-kernel

GitHub mirror of the SELinux kernel repository

https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git

Other

148 stars 56 forks source link

RFE: log the policy capability state when a new policy is loaded into the kernel #32

Closed pcmoore closed 7 years ago

pcmoore commented 7 years ago

We should record if the known policy capabilities are enabled/disabled by the newly loaded SELinux policy. We may also want to record any unknown policy capabilities for informative purposes.

stephensmalley commented 7 years ago

Resolved by 21d34af59b8e