feature request: show nested subjects in logs

Discuss and suggest new grsecurity features

feature request: show nested subjects in logs

Postby `VL » Sun Apr 01, 2007 4:02 pm

that would be very nice to see chain of nested subjects in logs.

If you have big policy with nested subjects, you have a lot of same subjects, being in different chains; for example you have rules for 'mkdir' , executed from differnet scripts.

But in logs now it can only be seen that /bin/mkdir is denied to do something. And which one? There are many,if nested subjects are used.

Usually, it`s quite easy to detect, which one, but after some time if you find something like '/bin/mkdir' denied in logs it`s very hard to determine, which part of policy you have to fix.
`VL
 
Posts: 28
Joined: Wed Feb 23, 2005 2:11 pm

Return to grsecurity development

cron