Fan Wu 0e5f66bf05 ipe: fix enforcement audit ...

ipe_audit_enforce() starts an audit buffer but writes the state change
with audit_log(), which logs its own record. Ending the unused buffer
then emits an extra empty AUDIT_MAC_STATUS record.

Remove the unused buffer and log the state change with audit_log()
alone.

Fixes: a68916eaed ("ipe: add permissive toggle")
Assisted-by: LLM
Signed-off-by: Fan Wu <wufan@kernel.org>

2026-10-19 17:21:22 -07:00

..

.gitignore

scripts: add boot policy generation program

2024-08-20 14:03:39 -04:00

audit.c

ipe: fix enforcement audit

2026-10-19 17:21:22 -07:00

audit.h

ipe: add permissive toggle

2024-08-20 14:02:27 -04:00

digest.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

digest.h

ipe: add support for dm-verity as a trust provider

2024-08-20 14:02:45 -04:00

eval.c

ipe: protect the dm-verity root hash with RCU

2026-09-25 13:30:27 -07:00

eval.h

ipe: protect the dm-verity root hash with RCU

2026-09-25 13:30:27 -07:00

fs.c

ipe: fix use-after-free when auditing a newly loaded policy

2026-09-25 13:30:27 -07:00

fs.h

ipe: add userspace interface

2024-08-20 14:02:15 -04:00

hooks.c

ipe: protect the dm-verity root hash with RCU

2026-09-25 13:30:27 -07:00

hooks.h

ipe: Add AT_EXECVE_CHECK support for script enforcement

2025-12-02 19:37:01 -08:00

ipe.c

Merge tag 'ipe-pr-20251202' of git://git.kernel.org/pub/scm/linux/kernel/git/wufan/ipe

2025-12-03 11:19:34 -08:00

ipe.h

ipe: move initcalls to the LSM framework

2025-10-22 19:24:25 -04:00

Kconfig

ipe: use SHA-256 library API instead of crypto_shash API

2025-07-28 18:54:18 -07:00

Makefile

ipe: kunit test for parser

2024-08-20 14:03:43 -04:00

policy_fs.c

ipe: fix use-after-free when auditing a newly loaded policy

2026-09-25 13:30:27 -07:00

policy_parser.c

ipe: check parser token table sizes

2026-10-19 17:21:22 -07:00

policy_parser.h

ipe: add policy parser

2024-08-20 14:01:00 -04:00

policy_tests.c

ipe: Add missing terminator to list of unit tests

2024-09-23 15:53:37 -04:00

policy.c

ipe: correct policy text ownership comment

2026-10-19 17:21:22 -07:00

policy.h

ipe: enable support for fs-verity as a trust provider

2024-08-20 14:03:35 -04:00