Audit support - Githubissues

landlock-lsm / linux

Linux kernel - See Landlock issues

https://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git/

Other

35 stars 10 forks source link

Audit support #3

Open l0kod opened 10 months ago

l0kod commented 10 months ago

Add audit support to Landlock. Logging denied requests is useful for different use cases:

app developers: to ease and speed up sandboxing support
power users: to understand denials
sysadmins: to look for users' issues
tailored distro maintainers: to get usage metrics from their fleet
security experts: to detect attack attempts

See https://lore.kernel.org/all/20230921061641.273654-1-mic@digikod.net/

Related chromeOS CL: https://chromium-review.googlesource.com/c/chromiumos/third_party/kernel/+/4642629

l0kod commented 1 month ago

v2: https://lore.kernel.org/all/20241022161009.982584-1-mic@digikod.net/