[go: up one dir, main page]

|
|
Log in / Subscribe / Register

Auditing io_uring

Auditing io_uring

Posted Jun 14, 2021 0:27 UTC (Mon) by bartoc (guest, #124262)
In reply to: Auditing io_uring by JanC_
Parent article: Auditing io_uring

a huge percentage of users. SELinux depends on AUDIT, and basically all managed linux systems have that on. All Fedora, Red Hat, and Ubuntu systems have either SELinux or AppArmor turned on by default, with various levels of enforcement and permissiveness in their settings.

I doubt anyone really needs audit support for async reads and writes but lacking file open and close operations would add a pretty trivial way around selinux.

Further the whole point of selinux is defense in depth should some application get compromised, and there are lots of applications that are network accessible and require fast IO, or want async IO that has the model of io_uring.


to post comments


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds