Re: [PATCH] LSM hooks for audit

On Wed, 2004-09-15 at 10:32, Serge Hallyn wrote:
> The last one is the most dubious one in my mind, but we do want to
> prevent a user from sending fake login audit messages, either to mislead
> the auditor or to fill the log with garbage.

I agree that it should be controlled, and so should AUDIT_USER; you
don't want arbitrary processes being able to flood the logs.

-- 
Stephen Smalley <sds@xxxxxxxxxxxxxx>
National Security Agency