messages from 2012-01-11 21:48:46 to 2012-07-13 17:39:47 UTC [more...]
retrieve EIP/RIP for syscall in audit
2012-07-13 17:39 UTC (4+ messages)
Issues with auditd kernel panic and nfs mounts
2012-07-13 17:35 UTC
Output of aureport in columns
2012-07-13 17:19 UTC (5+ messages)
PCI-DSS: Log every root actions/keystrokes but avoid passwords
2012-07-13 17:09 UTC (8+ messages)
` EXT :Re: "
How to capture mount event in /var/log/audit/audit.log
2012-07-09 21:57 UTC (4+ messages)
capture mount event in /var/log/audit/audit.log
2012-07-07 22:18 UTC (2+ messages)
-F dir=/nfs/path ?
2012-07-06 23:58 UTC (4+ messages)
AUTO: Gavin Appleton is out of the office. (returning 09/07/2012)
2012-07-04 17:06 UTC
auditing syscalls made 'by' an inode?
2012-07-03 22:02 UTC (8+ messages)
AUTO: Gavin Appleton is out of the office. (returning 29/06/2012)
2012-06-28 17:04 UTC
[PATCH] Audit Compilation on QEMU/Debian Squeeze
2012-06-27 17:42 UTC (2+ messages)
[PATCH v4 0/9] audit: overhaul audit_names handling to allow for retrying on path-based syscalls
2012-06-26 16:35 UTC (10+ messages)
` [PATCH v4 1/9] audit: remove unnecessary NULL ptr checks from do_path_lookup
` [PATCH v4 2/9] audit: pass in dentry to audit_copy_inode wherever possible
` [PATCH v4 3/9] audit: reverse arguments to audit_inode_child
` [PATCH v4 4/9] audit: add a new "type" field to audit_names struct
` [PATCH v4 5/9] audit: set the name_len in audit_inode for parent lookups
` [PATCH v4 6/9] audit: remove dirlen argument to audit_compare_dname_path
` [PATCH v4 7/9] audit: make audit_compare_dname_path use parent_len helper
` [PATCH v4 8/9] audit: optimize audit_compare_dname_path
` [PATCH v4 9/9] audit: overhaul __audit_inode_child to accomodate retrying
event for exited process
2012-06-26 15:46 UTC (2+ messages)
Linux Audit Framework question
2012-06-25 12:01 UTC (2+ messages)
[PATCH] auditctl Running In QEMU
2012-06-15 20:23 UTC
List of search fields?
2012-06-11 18:22 UTC (2+ messages)
Near Term Audit Road Map
2009-03-24 16:41 UTC (4+ messages)
` audisp-remote and audisp-prelude question
ausearch & aureport fail from cron
2012-06-01 18:54 UTC (3+ messages)
Audit logs rotation problem
2012-05-23 13:37 UTC (3+ messages)
Invitation to connect on LinkedIn
2012-05-18 0:12 UTC (2+ messages)
auditctl exit code
2012-05-15 8:31 UTC (4+ messages)
Rule Compatibility Issues With Old Version of Audit
2012-05-11 14:48 UTC (2+ messages)
Kernel oops+crash on repeated auditd restarts
2012-04-24 19:06 UTC (24+ messages)
[ANN] Linux Security Summit 2011 - Announcement and CFP
2012-04-12 13:36 UTC (2+ messages)
` [ANN] Linux Security Summit 2012 "
auditd.service Fedora 16 Not starting
2012-04-10 14:37 UTC
AUTO: Gavin Appleton is out of the office. (returning 09/04/2012)
2012-04-06 17:07 UTC
audit-2.2.1 released
2012-03-23 13:26 UTC
[PATCH] Have auditctl check the capability rather than the uid if we were compiled with cap-ng support. Check the euid rather than uid if we were compiled without cap-ng support
2012-03-22 15:47 UTC (5+ messages)
` Please check svn was Re: [PATCH] Have auditctl check the capability...<snip>
getuid() vs. geteuid() in auditctl
2012-03-21 21:34 UTC (5+ messages)
auparse, stdin, and AUPARSE_CB_EVENT_READY
2012-03-07 17:48 UTC (4+ messages)
[PATCH] Fix output of configure.ac
2012-03-02 20:22 UTC (2+ messages)
[PATCH] auparse: apparmor fields
2012-03-02 17:08 UTC (5+ messages)
` [PATCH v2] "
audit-2.2 released
2012-03-01 20:02 UTC
New audit package release this week
2012-02-29 0:25 UTC
[PATCH 0/2] Improvements to AVC record matching
2012-02-28 23:28 UTC (5+ messages)
` [PATCH 1/2] auvirt: Improve matching of AVC records generated by SELinux
` [PATCH 2/2] auvirt: Add support for AVC records generated by AppArmor
test patch for auditctl inter-field comparisons on euid/uid, egid/gid
2012-02-28 23:12 UTC (5+ messages)
[PATCH - linux-next] ARM: ptrace: Fix audit caused compile error
2012-02-21 13:49 UTC (5+ messages)
[PATCH] auvirt: Remove workaround for VM name searching
2012-02-13 11:46 UTC (3+ messages)
[PATCH] auvirt: Add security context to "relabel{to, from}" AVC records
2012-02-11 15:04 UTC (2+ messages)
[PATCH] auvirt: Add details to cgroup records
2012-02-11 15:02 UTC (2+ messages)
AUTO: Gavin Appleton is out of the office. (returning 20/02/2012)
2012-02-10 18:10 UTC
[PATCH 1/2] auparse: Remove quotes from parsed fields
2012-02-09 18:04 UTC (8+ messages)
` [PATCH 2/2] auvirt: Remove workaround for VM name searching
audit.rules
2012-02-08 18:40 UTC (4+ messages)
[PATCH] ausearch: Fix parsing of uid in user space events
2012-02-07 22:11 UTC (2+ messages)
Question about Memory leaks in 1.7
2012-02-06 15:49 UTC
[PATCH] auvirt: a new tool for reporting events related to virtual machines
2012-02-03 18:52 UTC (2+ messages)
[PATCH] auvirt: a new tool for reporting events related to virtual machines
2012-01-27 17:31 UTC (19+ messages)
linux auditd: Not getting log for chmod syscall
2012-01-24 16:03 UTC (6+ messages)
` Fwd: "
expected performance hit for logging all execve's?
2012-01-21 0:29 UTC (2+ messages)
Captured system calls that should be filtered out
2012-01-20 16:49 UTC (2+ messages)
what does the arch= hex number represent?
2012-01-20 14:26 UTC (2+ messages)
Capture System Time Changes
2012-01-19 19:13 UTC (2+ messages)
Path ignored but syscall event still logged
2012-01-16 11:13 UTC (12+ messages)
linux audit: not getting log for chmod
2012-01-13 6:12 UTC
Relying on syscall record for information and useless key/value duplication
2012-01-12 14:00 UTC (5+ messages)
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox