From: Steve Grubb <sgrubb@redhat.com>
To: Peter Moody <pmoody@google.com>
Cc: linux-audit@redhat.com
Subject: Re: [PATCH] Inter-field comparisons between uid/euid and gid/egid
Date: Sat, 24 Dec 2011 16:51:15 -0500 [thread overview]
Message-ID: <201112241651.15227.sgrubb@redhat.com> (raw)
In-Reply-To: <CALnj_=6w4TzpeCx26O_2stq5mwAgCkxhNNkM9Ca-wVFu-+3tGQ@mail.gmail.com>
On Thursday, December 22, 2011 11:32:11 AM Peter Moody wrote:
> On Wed, Dec 14, 2011 at 12:32 PM, Steve Grubb <sgrubb@redhat.com> wrote:
> > On Tuesday, December 13, 2011 07:17:51 PM Peter Moody wrote:
> > > > Closer. All permutations of uid and gid being able to compare against
> > > > either object or process credentials. Like auid!=ouid or auid!=uid.
> > >
> > > Ok, I think I got them all.
> >
> > Thanks. Eric, any comments?
>
> Is there anything else that I can do to help the case for this patch (and
> did you want the updated version that allowed auditctl -l to work with the
> interfield comparisons?
Not really, I think its just a bad time of the year to get quick results. :)
> the only change to kernel land was to put these in range of the other audit
> fields)
I'll be doing some more testing on this in January. Consider the patch more or
less accepted. We want that functionality.
-Steve
prev parent reply other threads:[~2011-12-24 21:51 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2011-12-11 19:04 [PATCH] Inter-field comparisons between uid/euid and gid/egid Peter Moody
2011-12-12 14:27 ` Steve Grubb
2011-12-12 16:35 ` Peter Moody
2011-12-12 17:48 ` Steve Grubb
2011-12-14 0:17 ` Peter Moody
2011-12-14 20:32 ` Steve Grubb
2011-12-22 16:32 ` Peter Moody
2011-12-24 21:51 ` Steve Grubb [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=201112241651.15227.sgrubb@redhat.com \
--to=sgrubb@redhat.com \
--cc=linux-audit@redhat.com \
--cc=pmoody@google.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.