diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c index 662f7b4a9516d1629495a4a077a1654465ca238a..1e205a3c165e7d273eec01061a01866867c0d987 100644 --- a/security/selinux/hooks.c +++ b/security/selinux/hooks.c @@ -6452,6 +6452,7 @@ static int selinux_setprocattr(const char *name, void *value, size_t size) /* Only allow single threaded processes to change context */ error = -EPERM; if (!current_is_single_threaded()) { + audit_log(audit_context(), GFP_ATOMIC, AUDIT_SELINUX_ERR, "lutao current is not single_threaded!"); error = security_bounded_transition(&selinux_state, tsec->sid, sid); if (error) diff --git a/security/selinux/ss/services.c b/security/selinux/ss/services.c index 31d631fa846ef838f1ee4270fd085fae17d177a1..e5148ebdc1dd59d0e929acf3a3d832f6c8c5b144 100644 --- a/security/selinux/ss/services.c +++ b/security/selinux/ss/services.c @@ -910,6 +910,7 @@ int security_bounded_transition(struct selinux_state *state, /* not bounded anymore */ rc = -EPERM; if (!type->bounds) + audit_log(audit_context(), GFP_ATOMIC, AUDIT_SELINUX_ERR, "lutao not bounded anymore!"); break; /* @newsid is bounded by @oldsid */