From a9eccd3dd68af01188f3f8d3d7104cf23a4f49e7 Mon Sep 17 00:00:00 2001 From: José Bollo Date: Thu, 3 Nov 2016 11:30:25 +0100 Subject: Smack: add audit when smack is active MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit It is important for developement process and for monitoring hacking to track violations and to monitor wrong uses or problems. By activating audit with Smack we ensure that detection and reporting of hazardous or malicious violations will be possible. Change-Id: I7808ff17b5b8ba1fb09742fd273f46f06917d26b Signed-off-by: José Bollo Signed-off-by: Stephane Desneux --- meta-app-framework/recipes-kernel/linux/linux-%.bbappend | 3 +++ meta-app-framework/recipes-kernel/linux/linux/audit.cfg | 2 ++ 2 files changed, 5 insertions(+) create mode 100644 meta-app-framework/recipes-kernel/linux/linux-%.bbappend create mode 100644 meta-app-framework/recipes-kernel/linux/linux/audit.cfg diff --git a/meta-app-framework/recipes-kernel/linux/linux-%.bbappend b/meta-app-framework/recipes-kernel/linux/linux-%.bbappend new file mode 100644 index 000000000..02595efdf --- /dev/null +++ b/meta-app-framework/recipes-kernel/linux/linux-%.bbappend @@ -0,0 +1,3 @@ +FILESEXTRAPATHS_prepend := "${THISDIR}/linux:" +SRC_URI_append_smack = " file://audit.cfg" + diff --git a/meta-app-framework/recipes-kernel/linux/linux/audit.cfg b/meta-app-framework/recipes-kernel/linux/linux/audit.cfg new file mode 100644 index 000000000..214dbe33f --- /dev/null +++ b/meta-app-framework/recipes-kernel/linux/linux/audit.cfg @@ -0,0 +1,2 @@ +CONFIG_AUDIT=y +CONFIG_AUDITSYSCALL=y -- cgit 1.2.3-korg