[PATCH v2 1/4] seccomp: Separate read and write code for actions_logged sysctl

James Morris jmorris at namei.org
Wed May 2 21:01:55 UTC 2018


On Wed, 2 May 2018, Tyler Hicks wrote:

> Break the read and write paths of the kernel.seccomp.actions_logged
> sysctl into separate functions to maintain readability. An upcoming
> change will need to audit writes, but not reads, of this sysctl which
> would introduce too many conditional code paths on whether or not the
> 'write' parameter evaluates to true.
> 
> Signed-off-by: Tyler Hicks <tyhicks at canonical.com>

Reviewed-by: James Morris <james.morris at microsoft.com>

-- 
James Morris
<jmorris at namei.org>




More information about the Linux-audit mailing list