• William Roberts's avatar
    audit: log permissive from access decision · c49a2755
    William Roberts authored
    
    
    The userspace object managers were missing the permissive=0|1 as found in the
    kernel logs. This is important when debugging potential policy issues.
    
    To remedy this, add the permissive result from the access decision at the
    end of the audit logs. A shortened log sample from Android:
    
    avc:  denied  { find } <snip> tclass=service_manager permissive=1
    
    Change-Id: Ic92852f3bad258982d8f68dc93d978612a52db04
    Signed-off-by: default avatarWilliam Roberts <william.c.roberts@intel.com>
    c49a2755
avc.c 25.5 KB