From mboxrd@z Thu Jan 1 00:00:00 1970 From: Eric Paris Subject: [GIT PULL] Audit subsystem for v3.15 Date: Thu, 10 Apr 2014 19:53:35 -0400 Message-ID: <1397174015.29990.30.camel@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Linus Torvalds Cc: linux-audit@redhat.com, linux-kernel@vger.kernel.org List-Id: linux-audit@redhat.com TGludXMsCgpQbGVhc2UgcHVsbCB0aGUgYXVkaXQgdHJlZSBmb3IgdjMuMTUuICBZb3Ugd2lsbCBo YXZlIG1lcmdlIGNvbmZsaWN0cy4KSSdsbCBwdWJsaXNoIG15IGJyYW5jaCAibWVyZ2UtdGVzdCIg d2hlcmUgSSBhdHRlbXB0ZWQgdG8gcmVzb2x2ZSB0aGVtCnRoZSB3YXkgeW91IHdpbGwuCgpUaGUg bWFpbiBpc3N1ZSBpcyBhbiBhY3Jvc3MgdHJlZSBjaGFuZ2UgdG8gc3lzY2FsbF9nZXRfYXJjaCgp LiAgSSBjaGFuZ2UKaXQgZnJvbSB0YWtpbmcgYSB0YXNrX3N0cnVjdCBhbmQgcHRfcmVncyB0byB0 YWtlIGEgdm9pZC4gIE5vdCBhIHNpbmdsZQphcmNoIHVzZWQgb3IgbmVlZGVkIGVpdGhlciBvZiB0 aGVzZSBhcmd1bWVudHMuICAoRm9yIDMuMTYgd2UgcGxhbiB0bwppbXBsZW1lbnQgdGhlIGZ1bmN0 aW9uIG9uIG1vcmUgYXJjaGVzKQoKVGhlcmUgYXJlIGEgY291cGxlIG9mIGNvbmZsaWN0cyB3aGVy ZSBJIG1hZGUgY2hhbmdlcyB0byAjaW5jbHVkZXMgYW5kCnlvdXIgdHJlZSBhbHNvIGhhcyBzb21l IGFkZGl0aW9ucy4gIFNob3VsZCBiZSBvYnZpb3VzLgoKVHdvIGNvbmZsaWN0IGlzc3VlcyB3aXRo IEtjb25maWcgY2hhbmdlcy4gIFRoZSBmaXJzdCBpcyBqdXN0IHRoYXQgeW91cgp0cmVlIGhhcyBz b21lIGFkZGl0aW9uYWwgJ3NlbGVjdCcgbGluZXMgbWluZSBkaWRuJ3QuICBPYnZpb3VzIHRvCnJl c29sdmUuCgpUaGUgc2Vjb25kIGlzIGEgY29uZmxpY3QgaW4gaW5pdC9LY29uZmlnLiAgSSBkb24n dCBjb21wbGV0ZWx5IHVuZGVyc3RhbmQKaXQuICBJIGJlbGlldmUgaXQgd2FzIHRoZSBhZGRpdGlv biBvZiBBTFBIQSB0byB0aGUgZ2lnYW50aWMgZGVwZW5kcwpsaW5lLiAgSSBjaGVycnktcGlja2Vk IHRoZSBwYXRjaCBmcm9tIHlvdXIgdHJlZSB0aGF0IGludHJvZHVjZWQgQUxQSEEKYmVmb3JlIEkg bWFkZSB0aGUgc3dpdGNoIHRvIEhBVkVfQVJDSF9BVURJVFNZU0NBTEwuICBJIGJlbGlldmVkIHRo YXQKd291bGQgYXZvaWQgdGhlIGNvbmZsaWN0LCBidXQgSSBndWVzcyBJIHdhcyB3cm9uZy4gIElu IGFueSBjYXNlLCBJIGhhdmUKdGhlICdzZWxlY3QgSEFWRV9BUkNIX0FVRElUU1lTQ0FMTCcgaW4g YWxwaGEuCgpUaGVyZSBpcyBhbHNvIGEgY29uZmxpY3QgZ2l2ZW4gdGhlIGxhc3Qgc2Vjb25kIEVQ RVJNLT5FQ09OTlJFRlVTRUQKc3dpdGNoZXJvby4gIE15IDMuMTUgaXMgbGVzcyByZXN0cmljdGl2 ZS4gIFdlIHJldHVybiBFQ09OTlJFRlVTRUQgb25seQpmb3Igbm9uLWluaXQgdXNlcm5hbWUuICBT aG91bGQgYmUgYW5vdGhlciBlYXN5IG9uZS4uLgoKUGxlYXNlIGxldCBtZSBrbm93IGlmIGFueXRo aW5nIGlzbid0IGVhc3kvb2J2aW91cyBmb3IgeW91IQoKVGhhbmsgeW91IQoKLUVyaWMKClRoZSBm b2xsb3dpbmcgY2hhbmdlcyBzaW5jZSBjb21taXQgYjdkMzYyMmEzOWZkZTc2NTgxNzBiN2YzY2Y2 YzY4ODliYjhkYjMwZDoKCiAgTWVyZ2UgdGFnICd2My4xMycgaW50byBmb3ItMy4xNSAoMjAxNC0w My0wNyAxMTo0MTozMiAtMDUwMCkKCmFyZSBhdmFpbGFibGUgaW4gdGhlIGdpdCByZXBvc2l0b3J5 IGF0OgoKCiAgZ2l0Oi8vZ2l0LmluZnJhZGVhZC5vcmcvdXNlcnMvZXBhcmlzL2F1ZGl0LmdpdCBt YXN0ZXIKCmZvciB5b3UgdG8gZmV0Y2ggY2hhbmdlcyB1cCB0byAzMTIxMDNkNjRkMGZjYWRiMzMy ODk5YTJjODRiMzU3ZGRiMThmNGUzOgoKICBBVURJVDogbWFrZSBhdWRpdF9pc19jb21wYXQgZGVw ZW5kIG9uIENPTkZJR19BVURJVF9DT01QQVRfR0VORVJJQyAoMjAxNC0wNC0xMCAxNzo1MToyOSAt MDQwMCkKCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0KQUtBU0hJIFRha2FoaXJvICgyKToKICAgICAgYXVkaXQ6IEFkZCBDT05G SUdfSEFWRV9BUkNIX0FVRElUU1lTQ0FMTAogICAgICBhdWRpdDogQWRkIGdlbmVyaWMgY29tcGF0 IHN5c2NhbGwgc3VwcG9ydAoKQ2hyaXMgTWV0Y2FsZiAoMSk6CiAgICAgIEFVRElUOiBtYWtlIGF1 ZGl0X2lzX2NvbXBhdCBkZXBlbmQgb24gQ09ORklHX0FVRElUX0NPTVBBVF9HRU5FUklDCgpFcmlj IFBhcmlzICg3KToKICAgICAgYXVkaXQ6IGluY2x1ZGUgc3ViamVjdCBpbiBsb2dpbiByZWNvcmRz CiAgICAgIHN5c2NhbGxfZ2V0X2FyY2g6IHJlbW92ZSB1c2VsZXNzIGZ1bmN0aW9uIGFyZ3VtZW50 cwogICAgICBhdWRpdDogdXNlIHVhcGkvbGludXgvYXVkaXQuaCBmb3IgQVVESVRfQVJDSCBkZWNs YXJhdGlvbnMKICAgICAgYXVkaXQ6IGRlZmluZSBhdWRpdF9pc19jb21wYXQgaW4ga2VybmVsIGlu dGVybmFsIGhlYWRlcgogICAgICBBVURJVDogQWxsb3cgbG9naW4gaW4gbm9uLWluaXQgbmFtZXNw YWNlcwogICAgICBhdWRpdDogZG8gbm90IGNhc3QgYXVkaXRfcnVsZV9kYXRhIHBvaW50ZXJzIHBv aW50bGVzbHkKICAgICAgYXVkaXQ6IHJlbnVtYmVyIEFVRElUX0ZFQVRVUkVfQ0hBTkdFIGludG8g dGhlIDEzMDAgcmFuZ2UKCkVyaWMgVy4gQmllZGVybWFuICgyKToKICAgICAgYXVkaXQ6IFVzZSBz dHJ1Y3QgbmV0IG5vdCBwaWRfdCB0byByZW1lbWJlciB0aGUgbmV0d29yayBuYW1lc3BjZSB0byBy ZXBseSBpbgogICAgICBhdWRpdDogU2VuZCByZXBsaWVzIGluIHRoZSBwcm9wZXIgbmV0d29yayBu YW1lc3BhY2UuCgpKb2UgUGVyY2hlcyAoMSk6CiAgICAgIGF1ZGl0OiByZW1vdmUgc3RyYXkgbmV3 bGluZSBmcm9tIGF1ZGl0X2xvZ19leGVjdmVfaW5mbygpIGF1ZGl0X3BhbmljKCkgY2FsbAoKSm9z aCBCb3llciAoMSk6CiAgICAgIGF1ZGl0OiByZW1vdmUgc3RyYXkgbmV3bGluZXMgZnJvbSBhdWRp dF9sb2dfbG9zdCBtZXNzYWdlcwoKTW9uYW0gQWdhcndhbCAoMSk6CiAgICAgIGtlcm5lbDogVXNl IFJDVV9JTklUX1BPSU5URVIoeCwgTlVMTCkgaW4gYXVkaXQuYwoKUmljaGFyZCBHdXkgQnJpZ2dz ICg5KToKICAgICAgYXVkaXQ6IFVzZSBtb3JlIGN1cnJlbnQgbG9nZ2luZyBzdHlsZSBhZ2Fpbgog ICAgICBjYXBhYmlsaXRpZXM6IGFkZCBkZXNjcmlwdGlvbnMgZm9yIEFVRElUX0NPTlRST0wgYW5k IEFVRElUX1dSSVRFCiAgICAgIGF1ZGl0OiByZW5hbWUgdGhlIG1pc2xlYWRpbmcgYXVkaXRfZ2V0 X2NvbnRleHQoKSB0byBhdWRpdF90YWtlX2NvbnRleHQoKQogICAgICBwaWQ6IGdldCBwaWRfdCBw cGlkIG9mIHRhc2sgaW4gaW5pdF9waWRfbnMKICAgICAgYXVkaXQ6IGNvbnZlcnQgUFBJRHMgdG8g dGhlIGluaXRhbCBQSUQgbmFtZXNwYWNlLgogICAgICBhdWRpdDogYW5jaG9yIGFsbCBwaWQgcmVm ZXJlbmNlcyBpbiB0aGUgaW5pdGlhbCBwaWQgbmFtZXNwYWNlCiAgICAgIGF1ZGl0OiBhbGxvdyB1 c2VyIHByb2Nlc3NlcyB0byBsb2cgZnJvbSBhbm90aGVyIFBJRCBuYW1lc3BhY2UKICAgICAgYXVk aXQ6IHJlbW92ZSBzdXBlcmZsdW91cyBuZXctIHByZWZpeCBpbiBBVURJVF9MT0dJTiBtZXNzYWdl cwogICAgICBzY2hlZDogZGVjbGFyZSBwaWRfYWxpdmUgYXMgaW5saW5lCgpXaWxsaWFtIFJvYmVy dHMgKDMpOgogICAgICBtbTogQ3JlYXRlIHV0aWxpdHkgZnVuY3Rpb24gZm9yIGFjY2Vzc2luZyBh IHRhc2tzIGNvbW1hbmRsaW5lIHZhbHVlCiAgICAgIHByb2M6IFVwZGF0ZSBnZXQgcHJvY19waWRf Y21kbGluZSgpIHRvIHVzZSBtbS5oIGhlbHBlcnMKICAgICAgYXVkaXQ6IEF1ZGl0IHByb2MvPHBp ZD4vY21kbGluZSBha2EgcHJvY3RpdGxlCgrolKHmraPpvpkgKDEpOgogICAgICBhbHBoYTogRW5h YmxlIHN5c3RlbS1jYWxsIGF1ZGl0aW5nIHN1cHBvcnQuCgogYXJjaC9hbHBoYS9LY29uZmlnICAg ICAgICAgICAgICAgICAgIHwgICA0ICsrKysKIGFyY2gvYWxwaGEvaW5jbHVkZS9hc20vcHRyYWNl LmggICAgICB8ICAgNSArKysrKwogYXJjaC9hbHBoYS9pbmNsdWRlL2FzbS90aHJlYWRfaW5mby5o IHwgICAyICsrCiBhcmNoL2FscGhhL2tlcm5lbC9NYWtlZmlsZSAgICAgICAgICAgfCAgIDEgKwog YXJjaC9hbHBoYS9rZXJuZWwvYXVkaXQuYyAgICAgICAgICAgIHwgIDYwICsrKysrKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrCiBhcmNoL2FscGhh L2tlcm5lbC9lbnRyeS5TICAgICAgICAgICAgfCAgIDYgKysrKystCiBhcmNoL2FscGhhL2tlcm5l bC9wdHJhY2UuYyAgICAgICAgICAgfCAgIDQgKysrKwogYXJjaC9hcm0vS2NvbmZpZyAgICAgICAg ICAgICAgICAgICAgIHwgICAxICsKIGFyY2gvYXJtL2luY2x1ZGUvYXNtL3N5c2NhbGwuaCAgICAg ICB8ICAgNSArKy0tLQogYXJjaC9pYTY0L0tjb25maWcgICAgICAgICAgICAgICAgICAgIHwgICAx ICsKIGFyY2gvbWlwcy9pbmNsdWRlL2FzbS9zeXNjYWxsLmggICAgICB8ICAgNCArKy0tCiBhcmNo L21pcHMva2VybmVsL3B0cmFjZS5jICAgICAgICAgICAgfCAgIDIgKy0KIGFyY2gvcGFyaXNjL0tj b25maWcgICAgICAgICAgICAgICAgICB8ICAgMSArCiBhcmNoL3Bvd2VycGMvS2NvbmZpZyAgICAg ICAgICAgICAgICAgfCAgIDEgKwogYXJjaC9zMzkwL0tjb25maWcgICAgICAgICAgICAgICAgICAg IHwgICAxICsKIGFyY2gvczM5MC9pbmNsdWRlL2FzbS9zeXNjYWxsLmggICAgICB8ICAgNyArKyst LS0tCiBhcmNoL3NoL0tjb25maWcgICAgICAgICAgICAgICAgICAgICAgfCAgIDEgKwogYXJjaC9z cGFyYy9LY29uZmlnICAgICAgICAgICAgICAgICAgIHwgICAxICsKIGFyY2gvdW0vS2NvbmZpZy5j b21tb24gICAgICAgICAgICAgICB8ICAgMSArCiBhcmNoL3g4Ni9LY29uZmlnICAgICAgICAgICAg ICAgICAgICAgfCAgIDEgKwogYXJjaC94ODYvaW5jbHVkZS9hc20vc3lzY2FsbC5oICAgICAgIHwg IDEwICsrKystLS0tLS0KIGRyaXZlcnMvdHR5L3R0eV9hdWRpdC5jICAgICAgICAgICAgICB8ICAg MyArKy0KIGZzL3Byb2MvYmFzZS5jICAgICAgICAgICAgICAgICAgICAgICB8ICAzNiArKy0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KIGluY2x1ZGUvYXNtLWdlbmVyaWMvc3lzY2Fs bC5oICAgICAgICB8ICAgNCArLS0tCiBpbmNsdWRlL2xpbnV4L2F1ZGl0LmggICAgICAgICAgICAg ICAgfCAgMTcgKysrKysrKysrKysrKysrKy0KIGluY2x1ZGUvbGludXgvbW0uaCAgICAgICAgICAg ICAgICAgICB8ICAgMSArCiBpbmNsdWRlL2xpbnV4L3NjaGVkLmggICAgICAgICAgICAgICAgfCAg MjAgKysrKysrKysrKysrKysrKysrKy0KIGluY2x1ZGUvdWFwaS9saW51eC9hdWRpdC5oICAgICAg ICAgICB8ICAgMyArKy0KIGluY2x1ZGUvdWFwaS9saW51eC9jYXBhYmlsaXR5LmggICAgICB8ICAg NCArKysrCiBpbml0L0tjb25maWcgICAgICAgICAgICAgICAgICAgICAgICAgfCAgIDUgKysrKy0K IGtlcm5lbC9hdWRpdC5jICAgICAgICAgICAgICAgICAgICAgICB8ICA2NiArKysrKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQoga2Vy bmVsL2F1ZGl0LmggICAgICAgICAgICAgICAgICAgICAgIHwgICA4ICsrKysrKystCiBrZXJuZWwv YXVkaXRmaWx0ZXIuYyAgICAgICAgICAgICAgICAgfCAgNDEgKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKy0tLS0tLS0tLS0KIGtlcm5lbC9hdWRpdHNjLmMgICAgICAgICAgICAgICAgICAg ICB8IDEzMyArKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKy0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQoga2VybmVsL3NlY2NvbXAuYyAgICAgICAgICAgICAg ICAgICAgIHwgICA0ICsrLS0KIGxpYi9LY29uZmlnICAgICAgICAgICAgICAgICAgICAgICAgICB8 ICAgOSArKysrKysrKysKIGxpYi9NYWtlZmlsZSAgICAgICAgICAgICAgICAgICAgICAgICB8ICAg MSArCiBsaWIvYXVkaXQuYyAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgMTUgKysrKysrKysr KysrKystCiBsaWIvY29tcGF0X2F1ZGl0LmMgICAgICAgICAgICAgICAgICAgfCAgNTAgKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKwogbW0vdXRpbC5jICAg ICAgICAgICAgICAgICAgICAgICAgICAgIHwgIDQ4ICsrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrCiBzZWN1cml0eS9pbnRlZ3JpdHkvaW50ZWdyaXR5X2F1ZGl0 LmMgfCAgIDIgKy0KIHNlY3VyaXR5L2xzbV9hdWRpdC5jICAgICAgICAgICAgICAgICB8ICAxMSAr KysrKysrLS0tLQogNDIgZmlsZXMgY2hhbmdlZCwgNDY0IGluc2VydGlvbnMoKyksIDEzNiBkZWxl dGlvbnMoLSkKIGNyZWF0ZSBtb2RlIDEwMDY0NCBhcmNoL2FscGhhL2tlcm5lbC9hdWRpdC5jCiBj cmVhdGUgbW9kZSAxMDA2NDQgbGliL2NvbXBhdF9hdWRpdC5jCgoKLS0KTGludXgtYXVkaXQgbWFp bGluZyBsaXN0CkxpbnV4LWF1ZGl0QHJlZGhhdC5jb20KaHR0cHM6Ly93d3cucmVkaGF0LmNvbS9t YWlsbWFuL2xpc3RpbmZvL2xpbnV4LWF1ZGl0