Add audit support to Landlock. Logging denied requests is useful for different use cases:
- app developers: to ease and speed up sandboxing support
- power users: to understand denials
- sysadmins: to look for users' issues
- tailored distro maintainers: to get usage metrics from their fleet
- security experts: to detect attack attempts
See https://lore.kernel.org/all/20230921061641.273654-1-mic@digikod.net/
Related chromeOS CL: https://chromium-review.googlesource.com/c/chromiumos/third_party/kernel/+/4642629
Add audit support to Landlock. Logging denied requests is useful for different use cases:
See https://lore.kernel.org/all/20230921061641.273654-1-mic@digikod.net/
Related chromeOS CL: https://chromium-review.googlesource.com/c/chromiumos/third_party/kernel/+/4642629