Re: [PATCH] selinux: add tracepoint on denials
From: Paul Moore
Date: Tue Jul 28 2020 - 12:20:18 EST
On Tue, Jul 28, 2020 at 12:02 PM ThiÃbaud Weksteen <tweek@xxxxxxxxxx> wrote:
> On Tue, Jul 28, 2020 at 5:12 PM Paul Moore <paul@xxxxxxxxxxxxxx> wrote:
> > Perhaps it would be helpful if you provided an example of how one
> > would be expected to use this new tracepoint? That would help put
> > things in the proper perspective.
> The best example is the one I provided in the commit message, that is
> using perf (or a perf equivalent), to hook onto that tracepoint.
I probably wasn't as clear as I should have been. I think it would be
helpful if you demonstrated how one would take the SELinux data in the
perf event and translated that into something meaningful.