[Linux-ima-user] CONFIG_IMA_LSM_RULES depends on CONFIG_AUDIT?

[Patrick O. <pat...@in...>]

Hello!

I noticed that CONFIG_IMA_LSM_RULES can only be enabled when
CONFIG_AUDIT is also enabled. Why is that? At first glance it seemed
like it should be possible to compile the LSM code without auditing
enabled (not tested, though).

I was warned that enabling auditing has a performance impact. Is that
true even for just CONFIG_AUDIT=yes (and nothing else, in particular
nothing that turns on syscall auditing)?

-- 
Best Regards, Patrick Ohly

The content of this message is my personal opinion only and although
I am an employee of Intel, the statements I make here in no way
represent Intel's position on the issue, nor am I authorized to speak
on behalf of Intel on this matter.