[PATCH] LSM hooks for audit

Hi,

Attached is a patch which provides LSM controls over actions related to
the new audit framework.  As a specific example, we might like to have
an "audit role", enabled by selinux or some other LSM, which would be
the only role allowed to add or delete filter rules.

What do people think about adding these hooks, both in general and these
hooks specifically?

thanks,
-serge

-- 
=======================================================
Serge Hallyn
Security Software Engineer, IBM Linux Technology Center
serue@xxxxxxxxxx

audit-lsm.diff
Description: Text Data