am 80890a97: Merge "audit: log permissive from access decision"

* commit '80890a97507d6d117282c9d2077ed9e3e927c9fc':
  audit: log permissive from access decision

1 files changed, 5 insertions, 0 deletions

diff --git a/src/avc.c b/src/avc.c
index 15167f0..528d897 100644
--- a/src/avc.c
+++ b/src/avc.c
@@ -683,6 +683,11 @@ void avc_audit(security_id_t ssid, security_id_t tsid,
 
 	log_append(avc_audit_buf, " ");
 	avc_dump_query(ssid, tsid, tclass);
+
+	/* append permissive=0|1 like the kernel at the end */
+	if (denied || !requested)
+		log_append(avc_audit_buf, " permissive=%d", !result);
+
 	log_append(avc_audit_buf, "\n");
 	avc_log(SELINUX_AVC, "%s", avc_audit_buf);