Re: [PATCH v5 10/24] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status

2025-02-26 Thread Paul Moore
On Tue, Feb 18, 2025 at 2:21 PM Mickaël Salaün wrote: > > Are there guidance about __GFP_NOWARN for audit or other subsystems? Unfortunately I'm not aware of anything, and I too would be very interested in learning if there was some solid guidance around the GFP flags as the comment block in gfp_

Re: [PATCH v5 10/24] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status

2025-02-18 Thread Mickaël Salaün
On Fri, Feb 14, 2025 at 05:52:49PM -0500, Paul Moore wrote: > On Jan 31, 2025 =?UTF-8?q?Micka=C3=ABl=20Sala=C3=BCn?= > wrote: > > > > Asynchronously log domain information when it first denies an access. > > This minimize the amount of generated logs, which makes it possible to > > always log de

Re: [PATCH v5 10/24] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status

2025-02-14 Thread Paul Moore
On Jan 31, 2025 =?UTF-8?q?Micka=C3=ABl=20Sala=C3=BCn?= wrote: > > Asynchronously log domain information when it first denies an access. > This minimize the amount of generated logs, which makes it possible to > always log denials since they should not happen (except with the new > LANDLOCK_RESTRI

[PATCH v5 10/24] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status

2025-01-31 Thread Mickaël Salaün
Asynchronously log domain information when it first denies an access. This minimize the amount of generated logs, which makes it possible to always log denials since they should not happen (except with the new LANDLOCK_RESTRICT_SELF_QUIET flag). These records are identified with the new AUDIT_LAND