From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mimi Zohar Subject: Re: integrity: audit Date: Fri, 06 Feb 2009 11:15:14 -0500 Message-ID: <1233936914.3135.19.camel@localhost.localdomain> References: <1233924230.3135.5.camel@localhost.localdomain> <200902061001.06040.sgrubb@redhat.com> Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <200902061001.06040.sgrubb@redhat.com> Sender: linux-kernel-owner@vger.kernel.org To: Steve Grubb Cc: Linux Audit , linux-kernel@vger.kernel.org, Andrew Morton , James Morris , David Safford , Serge Hallyn List-Id: linux-audit@redhat.com On Fri, 2009-02-06 at 10:01 -0500, Steve Grubb wrote: > On Friday 06 February 2009 07:43:50 am Mimi Zohar wrote: > > This patch adds support to auditd for integrity messages, which are > > issued as a result of the integrity patchset that was applied to the > > security-testing-2.6/#next tree. > > > > Signed-off-by: Mimi Zohar > > NACK to anything around this. So far, no integrity patches have been reviewed > by the audit folks. > > -Steve The integrity auditing discussions took place a while ago in August 2007 (http://osdir.com/ml/linux.redhat.security.audit/2007-09/msg00007.html). The integrity patches are in security-testing-2.6/#next and the auditd patch I just posted to linux-audit. How do you suggest we go forward? Thanks! Mimi