mirror of
https://github.com/hardkernel/linux.git
synced 2026-06-07 19:30:30 +09:00
FROMGIT: audit: Add option to enable/disable syscall audit
Enable syscall audit has performance impact on Android, add option to enable/disable the syscall audits. Change-Id: I654e553daca388c03774886bf13410e2fdec0b02 Signed-off-by: Channagoud Kadabi <ckadabi@codeaurora.org> Signed-off-by: Prasad Sodagudi <psodagud@codeaurora.org> Signed-off-by: Tao Huang <huangtao@rock-chips.com> (cherry picked from https://android.googlesource.com/kernel/msm commit 338bc8bf0733fd4a75935f5685be9aa8e489571f)
This commit is contained in:
committed by
Tao Huang
parent
0c175338f6
commit
8dbbbc6014
11
init/Kconfig
11
init/Kconfig
@@ -335,15 +335,20 @@ config AUDIT
|
||||
help
|
||||
Enable auditing infrastructure that can be used with another
|
||||
kernel subsystem, such as SELinux (which requires this for
|
||||
logging of avc messages output). System call auditing is included
|
||||
on architectures which support it.
|
||||
logging of avc messages output). Does not do system-call
|
||||
auditing without CONFIG_AUDITSYSCALL.
|
||||
|
||||
config HAVE_ARCH_AUDITSYSCALL
|
||||
bool
|
||||
|
||||
config AUDITSYSCALL
|
||||
def_bool y
|
||||
bool "Enable system-call auditing support"
|
||||
depends on AUDIT && HAVE_ARCH_AUDITSYSCALL
|
||||
default y if SECURITY_SELINUX
|
||||
help
|
||||
Enable low-overhead system-call auditing infrastructure that
|
||||
can be used independently or with another kernel subsystem,
|
||||
such as SELinux.
|
||||
|
||||
config AUDIT_WATCH
|
||||
def_bool y
|
||||
|
||||
Reference in New Issue
Block a user