commit | 626b9740fa73cad043e136bfb3b6fca68a4f8a7c | [log] [tgz] |
---|---|---|
author | Stephen Smalley <sds@tycho.nsa.gov> | Tue Apr 29 11:29:04 2014 -0700 |
committer | Paul Moore <pmoore@redhat.com> | Thu May 01 14:56:14 2014 -0400 |
tree | 2f28ff59a691edcc8874b460a4f4e2f8075f611d | |
parent | 6d32c850621b0be75777b9102b14f6268bbd9f0f [diff] |
selinux: Report permissive mode in avc: denied messages. We cannot presently tell from an avc: denied message whether access was in fact denied or was allowed due to global or per-domain permissive mode. Add a permissive= field to the avc message to reflect this information. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> Acked-by: Eric Paris <eparis@redhat.com> Signed-off-by: Paul Moore <pmoore@redhat.com>