Set result based on AVC specific result
Open
enhancement
- Dominant language
- Go
- Stars
- 162
- Forks
- 74
- PR merge metrics
- No merged PRs in 30d
Description
Set `result` field based on `seresult` and `apparmor` for AVC messages.
An SELinux AVC event will set `seresult=denied`.
An AppArmor AVC event will set `apparmor=` where result can be one of [several values](https://github.com/linux-audit/audit-kernel/blob/v4.13/security/apparmor/include/audit.h#L37-L46).
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.