diff options
| author | Michael Weiß <michael.weiss@aisec.fraunhofer.de> | 2021-09-04 11:59:29 +0200 |
|---|---|---|
| committer | Mike Snitzer <snitzer@redhat.com> | 2021-10-27 16:54:36 -0400 |
| commit | 82bb85998cc9a3d26f6086c80fae7888db3b3fd9 (patch) | |
| tree | 1d2100b49665d49a415ddd0c63f1d831f369ccbc /drivers/md/Kconfig | |
| parent | 2cc1ae4878282c75a569e8ec677d569601c99dda (diff) | |
dm integrity: log audit events for dm-integrity target
dm-integrity signals integrity violations by returning I/O errors
to user space. To identify integrity violations by a controlling
instance, the kernel audit subsystem can be used to emit audit
events to user space. We use the new dm-audit submodule allowing
to emit audit events on relevant I/O errors.
The construction and destruction of integrity device mappings are
also relevant for auditing a system. Thus, those events are also
logged as audit events.
Signed-off-by: Michael Weiß <michael.weiss@aisec.fraunhofer.de>
Signed-off-by: Mike Snitzer <snitzer@redhat.com>
Diffstat (limited to 'drivers/md/Kconfig')
| -rw-r--r-- | drivers/md/Kconfig | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/md/Kconfig b/drivers/md/Kconfig index 1bc4f48e9765..b5ea378e66cb 100644 --- a/drivers/md/Kconfig +++ b/drivers/md/Kconfig @@ -610,6 +610,7 @@ config DM_INTEGRITY select CRYPTO select CRYPTO_SKCIPHER select ASYNC_XOR + select DM_AUDIT if AUDIT help This device-mapper target emulates a block device that has additional per-sector tags that can be used for storing |