Re: [PATCH v5 1/1] ipe: add errno field to IPE policy load auditing

2025-03-17 Thread Fan Wu
On Thu, Mar 13, 2025 at 2:51 PM Jasjiv Singh wrote: > > Users of IPE require a way to identify when and why an operation fails, > allowing them to both respond to violations of policy and be notified > of potentially malicious actions on their systems with respect to IPE. > > This patch introduces

Re: [PATCH v5 1/1] ipe: add errno field to IPE policy load auditing

2025-03-17 Thread Paul Moore
On Mon, Mar 17, 2025 at 4:59 PM Fan Wu wrote: > On Thu, Mar 13, 2025 at 2:51 PM Jasjiv Singh > wrote: > > > > Users of IPE require a way to identify when and why an operation fails, > > allowing them to both respond to violations of policy and be notified > > of potentially malicious actions on t

[PATCH v2] audit,module: restore audit logging in load failure case

2025-03-17 Thread Richard Guy Briggs
The move of the module sanity check to earlier skipped the audit logging call in the case of failure and to a place where the previously used context is unavailable. Add an audit logging call for the module loading failure case and get the module name when possible. Link: https://issues.redhat.co