[PATCH 1/2] SELinux Context Label based audit filtering

Steve Grubb sgrubb at redhat.com
Thu Feb 2 22:22:57 UTC 2006


On Thursday 02 February 2006 17:18, Steve Grubb wrote:
> I think we are covered. I mentioned to Dustin that those fields need to be
> handled as integers for comparison. We should be able to specify a range
> for matching like:
>
> -F "se_sensitivity>=2" -F "se_sensitivity<=9"

Oops sb

-F "se_sensitivity>=s2" -F "se_sensitivity<=s9"

Or whatever the local customizations are:

-F "se_sensitivity>=confidential" -F "se_sensitivity<=top-secret"

-Steve




More information about the Linux-audit mailing list