aboutsummaryrefslogtreecommitdiffstats
path: root/init
diff options
context:
space:
mode:
authorLinus Torvalds <torvalds@linux-foundation.org>2016-01-17 21:48:49 -0500
committerLinus Torvalds <torvalds@linux-foundation.org>2016-01-17 21:48:49 -0500
commit2d663b55816e5c1d211a77fff90687053fe78aac (patch)
treef74a6d3ce5c8b28a22b571dd5b4400f75317e9c5 /init
parent25eedabe019851bc513abd601ed514df524cb482 (diff)
parentcb74ed278f8054fddf79ed930495b9e214f7c7b2 (diff)
Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/audit
Pull audit updates from Paul Moore: "Seven audit patches for 4.5, all very minor despite the diffstat. The diffstat churn for linux/audit.h can be attributed to needing to reshuffle the linux/audit.h header to fix the seccomp auditing issue (see the commit description for details). Besides the seccomp/audit fix, most of the fixes are around trying to improve the connection with the audit daemon and a Kconfig simplification. Nothing crazy, and everything passes our little audit-testsuite" * 'upstream' of git://git.infradead.org/users/pcmoore/audit: audit: always enable syscall auditing when supported and audit is enabled audit: force seccomp event logging to honor the audit_enabled flag audit: Delete unnecessary checks before two function calls audit: wake up threads if queue switched from limited to unlimited audit: include auditd's threads in audit_log_start() wait exception audit: remove audit_backlog_wait_overflow audit: don't needlessly reset valid wait time
Diffstat (limited to 'init')
-rw-r--r--init/Kconfig11
1 files changed, 3 insertions, 8 deletions
diff --git a/init/Kconfig b/init/Kconfig
index 4644217b2373..5b86082fa238 100644
--- a/init/Kconfig
+++ b/init/Kconfig
@@ -299,20 +299,15 @@ config AUDIT
299 help 299 help
300 Enable auditing infrastructure that can be used with another 300 Enable auditing infrastructure that can be used with another
301 kernel subsystem, such as SELinux (which requires this for 301 kernel subsystem, such as SELinux (which requires this for
302 logging of avc messages output). Does not do system-call 302 logging of avc messages output). System call auditing is included
303 auditing without CONFIG_AUDITSYSCALL. 303 on architectures which support it.
304 304
305config HAVE_ARCH_AUDITSYSCALL 305config HAVE_ARCH_AUDITSYSCALL
306 bool 306 bool
307 307
308config AUDITSYSCALL 308config AUDITSYSCALL
309 bool "Enable system-call auditing support" 309 def_bool y
310 depends on AUDIT && HAVE_ARCH_AUDITSYSCALL 310 depends on AUDIT && HAVE_ARCH_AUDITSYSCALL
311 default y if SECURITY_SELINUX
312 help
313 Enable low-overhead system-call auditing infrastructure that
314 can be used independently or with another kernel subsystem,
315 such as SELinux.
316 311
317config AUDIT_WATCH 312config AUDIT_WATCH
318 def_bool y 313 def_bool y