Check the correct CONFIG_* option for sel_write_enforce

Co-authored-by: Alexander Pick <[email protected]>
lkrg-org · Sep 13, 2024 · e54224e · e54224e
1 parent 34298ec
commit e54224e
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 3 deletions.
diff --git a/src/modules/exploit_detection/p_exploit_detection.c b/src/modules/exploit_detection/p_exploit_detection.c
@@ -162,7 +162,7 @@ static const struct p_functions_hooks {
      "Won't enforce validation on 'generic_permission'",
      1
    },
-#ifdef CONFIG_SECURITY_SELINUX
+#ifdef CONFIG_SECURITY_SELINUX_DEVELOP
    { "sel_write_enforce",
      p_install_sel_write_enforce_hook,
      p_uninstall_sel_write_enforce_hook,

diff --git a/src/modules/exploit_detection/syscalls/p_sel_write_enforce/p_sel_write_enforce.c b/src/modules/exploit_detection/syscalls/p_sel_write_enforce/p_sel_write_enforce.c
@@ -19,7 +19,7 @@
  */
 
 
-#ifdef CONFIG_SECURITY_SELINUX
+#ifdef CONFIG_SECURITY_SELINUX_DEVELOP
 
 #include "../../../../p_lkrg_main.h"
 

diff --git a/src/modules/exploit_detection/syscalls/p_sel_write_enforce/p_sel_write_enforce.h b/src/modules/exploit_detection/syscalls/p_sel_write_enforce/p_sel_write_enforce.h
@@ -18,7 +18,7 @@
  *
  */
 
-#ifdef CONFIG_SECURITY_SELINUX
+#ifdef CONFIG_SECURITY_SELINUX_DEVELOP
 
 #ifndef P_LKRG_EXPLOIT_DETECTION_SEL_WRITE_ENFORCE_H
 #define P_LKRG_EXPLOIT_DETECTION_SEL_WRITE_ENFORCE_H

diff --git a/src/modules/print_log/p_lkrg_debug_log.c b/src/modules/print_log/p_lkrg_debug_log.c
@@ -139,7 +139,9 @@ static struct p_addr_name {
    P_LKRG_DEBUG_RULE_KPROBE(p_sys_add_key),
    P_LKRG_DEBUG_RULE_KPROBE(p_sys_request_key),
    P_LKRG_DEBUG_RULE_KPROBE(p_capable),
+#ifdef CONFIG_SECURITY_SELINUX_DEVELOP
    P_LKRG_DEBUG_RULE_KPROBE(p_sel_write_enforce),
+#endif
    P_LKRG_DEBUG_RULE_KPROBE(p_pcfi___queue_work),
    P_LKRG_DEBUG_RULE_KPROBE(p_pcfi_schedule),
    P_LKRG_DEBUG_RULE_KPROBE(p_pcfi_lookup_fast),