[PATCH 1/1]: ipsec audit

Steve Grubb sgrubb at redhat.com
Thu Nov 2 22:57:00 UTC 2006


On Wednesday 01 November 2006 18:10, Joy Latten wrote:
> Ok, I see how to get the security id from the netlink packet, but how do
> I get it from the audit context?

Look at the function audit_log_task_context(). You can use it probably.

> > > ctx_alg=%d ctx_doi=%d
> >
> > I'd drop the ctx in favor of sp.
>
> ok, but since the algorithm and doi or specific to security lsm/selinux
> and not ipsec, would sec_alg, or sec_doi, be better?

Sure.

-Steve




More information about the Linux-audit mailing list