audit: audit feature to set loginuid immutable

This adds a new 'audit_feature' bit which allows userspace to set it
such that the loginuid is absolutely immutable, even if you have
CAP_AUDIT_CONTROL.

Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
This commit is contained in:
Eric Paris 2013-05-23 14:26:00 -04:00
parent d040e5af38
commit 21b85c31d2
3 changed files with 7 additions and 2 deletions

View file

@ -144,8 +144,9 @@ static struct audit_features af = {.vers = AUDIT_FEATURE_VERSION,
.features = 0,
.lock = 0,};
static char *audit_feature_names[1] = {
static char *audit_feature_names[2] = {
"only_unset_loginuid",
"loginuid_immutable",
};