Fan Wu 0e5f66bf05 ipe: fix enforcement audit ... ipe_audit_enforce() starts an audit buffer but writes the state change with audit_log(), which logs its own record. Ending the unused buffer then emits an extra empty AUDIT_MAC_STATUS record. Remove the unused buffer and log the state change with audit_log() alone. Fixes: a68916eaed ("ipe: add permissive toggle") Assisted-by: LLM Signed-off-by: Fan Wu <wufan@kernel.org>		2026-10-19 17:21:22 -07:00
..
.gitignore
audit.c	ipe: fix enforcement audit	2026-10-19 17:21:22 -07:00
audit.h
digest.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
digest.h
eval.c	ipe: protect the dm-verity root hash with RCU	2026-09-25 13:30:27 -07:00
eval.h	ipe: protect the dm-verity root hash with RCU	2026-09-25 13:30:27 -07:00
fs.c	ipe: fix use-after-free when auditing a newly loaded policy	2026-09-25 13:30:27 -07:00
fs.h
hooks.c	ipe: protect the dm-verity root hash with RCU	2026-09-25 13:30:27 -07:00
hooks.h	ipe: Add AT_EXECVE_CHECK support for script enforcement	2025-12-02 19:37:01 -08:00
ipe.c	ipe/stable-6.19 PR 20251202	2025-12-03 11:19:34 -08:00
ipe.h	ipe: move initcalls to the LSM framework	2025-10-22 19:24:25 -04:00
Kconfig
Makefile
policy_fs.c	ipe: fix use-after-free when auditing a newly loaded policy	2026-09-25 13:30:27 -07:00
policy_parser.c	ipe: check parser token table sizes	2026-10-19 17:21:22 -07:00
policy_parser.h
policy_tests.c
policy.c	ipe: correct policy text ownership comment	2026-10-19 17:21:22 -07:00
policy.h