[redhat-lspp] [PATCH] newrole auditing of failures due to user actions

[Michael C Thompson]

This patch introduces two new point in the code where audit records are 
generated for newrole. Both points are when the attempt to newrole fails.

The first point is when the default type could not be determine for the 
specified role - this is audited because, as sgrubb pointed out, it is 
currently non-tracked path to probe the policy.

The second point is when the desired context to change to is invalid.

There record format remains unchanged. Failing to validate the desired 
context will result in the old and new contexts being recorded intact to 
the log. For the default type, the old and new contexts have not yet 
been obtained, so they are recorded in the log as XXX_context=?

Signed-off-by: Michael Thompson <thompsmc at us.ibm.com>

----


-------------- next part --------------
A non-text attachment was scrubbed...
Name: newrole_audit_fail.patch
Type: text/x-diff
Size: 2752 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/redhat-lspp/attachments/20060928/86aa8fd9/attachment.bin>