| commit | 066746796bd2f0a1ba210c0dded3b6ee4032692a | [log] [tgz] |
|---|---|---|
| author | Eric Paris <eparis@redhat.com> | Tue Nov 11 22:02:57 2008 +1100 |
| committer | James Morris <jmorris@namei.org> | Tue Nov 11 22:02:57 2008 +1100 |
| tree | 868832ca0e199e4f173e23375cffb5fc3870402c | |
| parent | a2f2945a99057c7d44043465906c6bb63c3368a0 [diff] |
Currently SELinux jumps through some ugly hoops to not audit a capbility check when determining if a process has additional powers to override memory limits or when trying to read/write illegal file labels. Use the new noaudit call instead. Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Stephen Smalley <sds@tycho.nsa.gov> Signed-off-by: James Morris <jmorris@namei.org>