Bug 634303 – audit filtering on selinux label of userspace audit messages

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 634303 - audit filtering on selinux label of userspace audit messages

Summary:	audit filtering on selinux label of userspace audit messages

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Enterprise Linux 6
Classification:	Red Hat
Component:	kernel (Show other bugs)
Sub Component:
Version:	6.1
Hardware:	All Linux

Priority	low Severity medium
Target Milestone:	rc
Target Release:	---
Assigned To:	Eric Paris
QA Contact:	Red Hat Kernel QE team
Docs Contact:

URL:
Whiteboard:
Keywords:

Depends On:
Blocks:	667405
	Show dependency tree / graph

Reported:	2010-09-15 14:43 EDT by Eric Paris
Modified:	2011-05-19 08:38 EDT (History)
CC List:	0 users

See Also:
Fixed In Version:	kernel-2.6.32-91.el6
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Clones:	667405 (view as bug list)
Environment:
Last Closed:	2011-05-19 08:38:13 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2011:0542	normal	SHIPPED_LIVE	Important: Red Hat Enterprise Linux 6.1 kernel security, bug fix and enhancement update	2011-05-19 07:58:07 EDT

Groups: None (edit)

Description Eric Paris 2010-09-15 14:43:46 EDT

Add support so the kernel can filter userspace audit messages based on the SELinux label of the process sending the message.  This is needed to support filtering of sVirt audit messages.

Comment 2 Eric Paris 2010-09-27 12:05:33 EDT

Posted to internal list for review potentially for 6.1

Comment 3 RHEL Product and Program Management 2010-11-19 12:40:40 EST

This request was evaluated by Red Hat Product Management for inclusion
in a Red Hat Enterprise Linux maintenance release. Product Management has 
requested further review of this request by Red Hat Engineering, for potential
inclusion in a Red Hat Enterprise Linux Update release for currently deployed 
products. This request is not yet committed for inclusion in an Update release.

Comment 4 Aristeu Rozanski 2010-12-15 11:05:15 EST

Patch(es) available on kernel-2.6.32-91.el6

Comment 8 errata-xmlrpc 2011-05-19 08:38:13 EDT

An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2011-0542.html

Note You need to log in before you can comment on or make changes to this bug.