From patchwork Thu Jul 9 07:50:56 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Dominick Grift X-Patchwork-Id: 11653701 Return-Path: Received: from mail.kernel.org (pdx-korg-mail-1.web.codeaurora.org [172.30.200.123]) by pdx-korg-patchwork-2.web.codeaurora.org (Postfix) with ESMTP id 3407B13B1 for ; Thu, 9 Jul 2020 07:51:14 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 8F2E120674 for ; Thu, 9 Jul 2020 07:51:13 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (1024-bit key) header.d=defensec.nl header.i=@defensec.nl header.b="rD6Sc6dl" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726367AbgGIHvN (ORCPT ); Thu, 9 Jul 2020 03:51:13 -0400 Received: from agnus.defensec.nl ([80.100.19.56]:57498 "EHLO agnus.defensec.nl" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726269AbgGIHvM (ORCPT ); Thu, 9 Jul 2020 03:51:12 -0400 Received: from localhost.localdomain (brutus [IPv6:2001:985:d55d::438]) by agnus.defensec.nl (Postfix) with ESMTPSA id C2DEC2A0EFE; Thu, 9 Jul 2020 09:51:06 +0200 (CEST) DKIM-Filter: OpenDKIM Filter v2.11.0 agnus.defensec.nl C2DEC2A0EFE DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=defensec.nl; s=default; t=1594281067; bh=0qKqn6cac54FlOdkL2ebAxHJf9P9kp7ct/sQwwq7bhI=; h=From:To:Cc:Subject:Date:From; b=rD6Sc6dl9RlKFm+aLS8WE2gTEWxHtckm055cPaVwoFw4aEY/eH+6hQn5otPwLrBKX 7Y5NXoqzlC3H1i4/NgSn/Vaa+gRNqRrQYTIireAjdKd6F4sVCpuwem3nsh3vuK9ByC 2J6T+Y2Jay1ciR4Ikm07F2ICvel+TGFbl/8N5uCg= From: Dominick Grift To: selinux@vger.kernel.org Cc: Dominick Grift Subject: [SELinux-notebook PATCH] auditing.md: describe avc record permissive keyword Date: Thu, 9 Jul 2020 09:50:56 +0200 Message-Id: <20200709075056.1670642-1-dominick.grift@defensec.nl> X-Mailer: git-send-email 2.27.0 MIME-Version: 1.0 Sender: selinux-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: selinux@vger.kernel.org This was added to Linux 4.17 via "selinux: Report permissive mode in avc: denied messages." Signed-off-by: Dominick Grift Acked-by: Richard Haines --- src/auditing.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/auditing.md b/src/auditing.md index 19f8be6..295373a 100644 --- a/src/auditing.md +++ b/src/auditing.md @@ -161,6 +161,12 @@ section that follows. tclass The object class of the target or object. + +permissive +Keyword introduced in Linux 4.17 to indicate whether the event +was denied or granted due to global or per-domain permissive +mode. +