dm integrity: log audit events for dm-integrity target
authorMichael Weiß <michael.weiss@aisec.fraunhofer.de>
Sat, 4 Sep 2021 09:59:29 +0000 (11:59 +0200)
committerMike Snitzer <snitzer@redhat.com>
Wed, 27 Oct 2021 20:54:36 +0000 (16:54 -0400)
commit82bb85998cc9a3d26f6086c80fae7888db3b3fd9
tree1d2100b49665d49a415ddd0c63f1d831f369ccbc
parent2cc1ae4878282c75a569e8ec677d569601c99dda
dm integrity: log audit events for dm-integrity target

dm-integrity signals integrity violations by returning I/O errors
to user space. To identify integrity violations by a controlling
instance, the kernel audit subsystem can be used to emit audit
events to user space. We use the new dm-audit submodule allowing
to emit audit events on relevant I/O errors.

The construction and destruction of integrity device mappings are
also relevant for auditing a system. Thus, those events are also
logged as audit events.

Signed-off-by: Michael Weiß <michael.weiss@aisec.fraunhofer.de>
Signed-off-by: Mike Snitzer <snitzer@redhat.com>
drivers/md/Kconfig
drivers/md/dm-integrity.c