From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from viefep18-int.chello.at ([213.46.255.22]:41558 "EHLO viefep32-int.chello.at" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1756010AbXGCPBE (ORCPT ); Tue, 3 Jul 2007 11:01:04 -0400 Subject: Re: [patch 2/3] audit: rework execve audit From: Peter Zijlstra In-Reply-To: <20070626155541.9708eded.akpm@linux-foundation.org> References: <20070613100334.635756997@chello.nl> <20070613100834.897301179@chello.nl> <20070626155541.9708eded.akpm@linux-foundation.org> Content-Type: text/plain Date: Tue, 03 Jul 2007 17:00:55 +0200 Message-Id: <1183474855.7054.2.camel@twins> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: linux-arch-owner@vger.kernel.org To: Andrew Morton Cc: linux-kernel@vger.kernel.org, parisc-linux@lists.parisc-linux.org, linux-mm@kvack.org, linux-arch@vger.kernel.org, Ollie Wild , Ingo Molnar , Andi Kleen , linux-audit@redhat.com List-ID: On Tue, 2007-06-26 at 15:55 -0700, Andrew Morton wrote: > On Wed, 13 Jun 2007 12:03:36 +0200 > Peter Zijlstra wrote: > > > +#ifdef CONFIG_AUDITSYSCALL > > + { > > + .ctl_name = CTL_UNNUMBERED, > > + .procname = "audit_argv_kb", > > + .data = &audit_argv_kb, > > + .maxlen = sizeof(int), > > + .mode = 0644, > > + .proc_handler = &proc_dointvec, > > + }, > > +#endif > > Please document /proc entries in Documentation/filesystems/proc.txt Signed-off-by: Peter Zijlstra --- Documentation/filesystems/proc.txt | 7 +++++++ 1 file changed, 7 insertions(+) Index: linux-2.6/Documentation/filesystems/proc.txt =================================================================== --- linux-2.6.orig/Documentation/filesystems/proc.txt +++ linux-2.6/Documentation/filesystems/proc.txt @@ -1075,6 +1075,13 @@ check the amount of free space (value is resume it if we have a value of 3 or more percent; consider information about the amount of free space valid for 30 seconds +audit_argv_kb +------------- + +The file contains a single value denoting the limit on the argv array size +for execve (in KiB). This limit is only applied when system call auditing for +execve is enabled, otherwise the value is ignored. + ctrl-alt-del ------------ From mboxrd@z Thu Jan 1 00:00:00 1970 From: Peter Zijlstra Subject: Re: [patch 2/3] audit: rework execve audit Date: Tue, 03 Jul 2007 17:00:55 +0200 Message-ID: <1183474855.7054.2.camel@twins> References: <20070613100334.635756997@chello.nl> <20070613100834.897301179@chello.nl> <20070626155541.9708eded.akpm@linux-foundation.org> Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit Return-path: Received: from mx2.redhat.com (mx2.redhat.com [10.255.15.25]) by int-mx2.corp.redhat.com (8.13.1/8.13.1) with ESMTP id l63F19Tk012127 for ; Tue, 3 Jul 2007 11:01:10 -0400 Received: from viefep32-int.chello.at (viefep18-int.chello.at [213.46.255.22]) by mx2.redhat.com (8.13.1/8.13.1) with ESMTP id l63F17UZ005673 for ; Tue, 3 Jul 2007 11:01:08 -0400 In-Reply-To: <20070626155541.9708eded.akpm@linux-foundation.org> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Andrew Morton Cc: linux-arch@vger.kernel.org, linux-kernel@vger.kernel.org, Andi Kleen , linux-mm@kvack.org, linux-audit@redhat.com, Ollie Wild , Ingo Molnar , parisc-linux@lists.parisc-linux.org List-Id: linux-audit@redhat.com On Tue, 2007-06-26 at 15:55 -0700, Andrew Morton wrote: > On Wed, 13 Jun 2007 12:03:36 +0200 > Peter Zijlstra wrote: > > > +#ifdef CONFIG_AUDITSYSCALL > > + { > > + .ctl_name = CTL_UNNUMBERED, > > + .procname = "audit_argv_kb", > > + .data = &audit_argv_kb, > > + .maxlen = sizeof(int), > > + .mode = 0644, > > + .proc_handler = &proc_dointvec, > > + }, > > +#endif > > Please document /proc entries in Documentation/filesystems/proc.txt Signed-off-by: Peter Zijlstra --- Documentation/filesystems/proc.txt | 7 +++++++ 1 file changed, 7 insertions(+) Index: linux-2.6/Documentation/filesystems/proc.txt =================================================================== --- linux-2.6.orig/Documentation/filesystems/proc.txt +++ linux-2.6/Documentation/filesystems/proc.txt @@ -1075,6 +1075,13 @@ check the amount of free space (value is resume it if we have a value of 3 or more percent; consider information about the amount of free space valid for 30 seconds +audit_argv_kb +------------- + +The file contains a single value denoting the limit on the argv array size +for execve (in KiB). This limit is only applied when system call auditing for +execve is enabled, otherwise the value is ignored. + ctrl-alt-del ------------ From mboxrd@z Thu Jan 1 00:00:00 1970 Subject: Re: [patch 2/3] audit: rework execve audit From: Peter Zijlstra In-Reply-To: <20070626155541.9708eded.akpm@linux-foundation.org> References: <20070613100334.635756997@chello.nl> <20070613100834.897301179@chello.nl> <20070626155541.9708eded.akpm@linux-foundation.org> Content-Type: text/plain Date: Tue, 03 Jul 2007 17:00:55 +0200 Message-Id: <1183474855.7054.2.camel@twins> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: owner-linux-mm@kvack.org Return-Path: To: Andrew Morton Cc: linux-kernel@vger.kernel.org, parisc-linux@lists.parisc-linux.org, linux-mm@kvack.org, linux-arch@vger.kernel.org, Ollie Wild , Ingo Molnar , Andi Kleen , linux-audit@redhat.com List-ID: On Tue, 2007-06-26 at 15:55 -0700, Andrew Morton wrote: > On Wed, 13 Jun 2007 12:03:36 +0200 > Peter Zijlstra wrote: > > > +#ifdef CONFIG_AUDITSYSCALL > > + { > > + .ctl_name = CTL_UNNUMBERED, > > + .procname = "audit_argv_kb", > > + .data = &audit_argv_kb, > > + .maxlen = sizeof(int), > > + .mode = 0644, > > + .proc_handler = &proc_dointvec, > > + }, > > +#endif > > Please document /proc entries in Documentation/filesystems/proc.txt Signed-off-by: Peter Zijlstra --- Documentation/filesystems/proc.txt | 7 +++++++ 1 file changed, 7 insertions(+) Index: linux-2.6/Documentation/filesystems/proc.txt =================================================================== --- linux-2.6.orig/Documentation/filesystems/proc.txt +++ linux-2.6/Documentation/filesystems/proc.txt @@ -1075,6 +1075,13 @@ check the amount of free space (value is resume it if we have a value of 3 or more percent; consider information about the amount of free space valid for 30 seconds +audit_argv_kb +------------- + +The file contains a single value denoting the limit on the argv array size +for execve (in KiB). This limit is only applied when system call auditing for +execve is enabled, otherwise the value is ignored. + ctrl-alt-del ------------ -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@kvack.org. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: email@kvack.org