Commit 6f594f5a authored by Christian Göttsche's avatar Christian Göttsche Committed by Paul Moore
Browse files

selinux: improve debug configuration 



If the SELinux debug configuration is enabled define the macro DEBUG
such that pr_debug() calls are always enabled, regardless of
CONFIG_DYNAMIC_DEBUG, since those message are the main reason for this
configuration in the first place.

Mention example usage in case CONFIG_DYNAMIC_DEBUG is enabled in the
help section of the configuration.

Signed-off-by: default avatarChristian Göttsche <cgzones@googlemail.com>
Reviewed-by: default avatarStephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: default avatarPaul Moore <paul@paul-moore.com>
parent fb8142ff

security/selinux/Kconfig

+10 −0
Original line number Diff line number Diff line
@@ -77,3 +77,13 @@ config SECURITY_SELINUX_DEBUG 
	  This enables debugging code designed to help SELinux kernel

	  developers, unless you know what this does in the kernel code you

	  should leave this disabled.



	  To fine control the messages to be printed enable

	  CONFIG_DYNAMIC_DEBUG and see

	  Documentation/admin-guide/dynamic-debug-howto.rst for additional

	  information.



	  Example usage:



		echo -n 'file "security/selinux/*" +p' > \

			/proc/dynamic_debug/control

security/selinux/Makefile

+2 −0
Original line number Diff line number Diff line
@@ -12,6 +12,8 @@ obj-$(CONFIG_SECURITY_SELINUX) := selinux.o 


ccflags-y := -I$(srctree)/security/selinux -I$(srctree)/security/selinux/include



ccflags-$(CONFIG_SECURITY_SELINUX_DEBUG) += -DDEBUG



selinux-y := avc.o hooks.o selinuxfs.o netlink.o nlmsgtab.o netif.o \

	     netnode.o netport.o status.o \

	     ss/ebitmap.o ss/hashtab.o ss/symtab.o ss/sidtab.o ss/avtab.o \