[PATCH 1/2] SELinux Context Label based audit filtering
Steve Grubb
sgrubb at redhat.com
Thu Feb 2 22:22:57 UTC 2006
On Thursday 02 February 2006 17:18, Steve Grubb wrote:
> I think we are covered. I mentioned to Dustin that those fields need to be
> handled as integers for comparison. We should be able to specify a range
> for matching like:
>
> -F "se_sensitivity>=2" -F "se_sensitivity<=9"
Oops sb
-F "se_sensitivity>=s2" -F "se_sensitivity<=s9"
Or whatever the local customizations are:
-F "se_sensitivity>=confidential" -F "se_sensitivity<=top-secret"
-Steve
More information about the Linux-audit
mailing list