messages from 2012-02-21 13:16:17 to 2012-08-27 12:54:19 UTC [more...]
[PATCH] Support for auditing on the actions of a not-yet-executed process
2012-08-27 12:54 UTC (2+ messages)
[PATCH] audit: audit on the future execution of a binary
2012-08-23 19:24 UTC
AUTO: Gavin Appleton is out of the office. (returning 23/08/2012)
2012-08-21 17:07 UTC
GPL-less alternatives to the Audit Userland
2012-08-20 23:06 UTC (3+ messages)
[PATCH] audit: grab a reference to context->pwd when it's cached
2012-08-20 17:19 UTC (4+ messages)
cross-compiling difficulty with on-the-fly gen/build/use paradigm
2012-08-20 16:47 UTC (3+ messages)
AUTO: Gavin Appleton is out of the office. (returning 20/08/2012)
2012-08-18 17:04 UTC
auparse delayed event emittance
2012-08-18 14:38 UTC
aureport and command lines
2012-08-18 13:19 UTC (2+ messages)
Advice on enriching logs with user and group names before moving them to a central log repository
2012-08-18 13:17 UTC (9+ messages)
100% reliable Oops
2012-08-14 1:04 UTC
missing user name
2012-08-03 19:14 UTC (6+ messages)
[PATCH 0/5] Build time disabling of auditd network listener
2012-08-01 7:00 UTC (6+ messages)
` [PATCH 1/5] Move auditd listener reconfigure code into auditd-listen.c
` [PATCH 2/5] Store daemon config pointer in the periodic watcher's private data
` [PATCH 3/5] Move periodic watcher into auditd-listen.c
` [PATCH 4/5] Consolidate periodic handler code
` [PATCH 5/5] Conditionally build auditd network listener support
AUTO: Gavin Appleton is out of the office. (returning 01/08/2012)
2012-07-31 17:03 UTC
mode = forward
2012-07-30 18:50 UTC (6+ messages)
[PATCH] audit: missing variable declaration/initialization when AUDIT_DEBUG == 2
2012-07-26 15:09 UTC (4+ messages)
[PATCH v5 0/9] audit: overhaul audit_names handling to allow for retrying on path-based syscalls
2012-07-26 11:21 UTC (10+ messages)
` [PATCH v5 1/9] audit: remove unnecessary NULL ptr checks from do_path_lookup
` [PATCH v5 2/9] audit: pass in dentry to audit_copy_inode wherever possible
` [PATCH v5 3/9] audit: reverse arguments to audit_inode_child
` [PATCH v5 4/9] audit: add a new "type" field to audit_names struct
` [PATCH v5 5/9] audit: set the name_len in audit_inode for parent lookups
` [PATCH v5 6/9] audit: remove dirlen argument to audit_compare_dname_path
` [PATCH v5 7/9] audit: make audit_compare_dname_path use parent_len helper
` [PATCH v5 8/9] audit: optimize audit_compare_dname_path
` [PATCH v5 9/9] audit: overhaul __audit_inode_child to accomodate retrying
multiline entries in audit.rules
2012-07-25 21:31 UTC
audit more syscalls during boot before auditd starts?
2012-07-23 14:42 UTC (3+ messages)
Sucess or failure?
2012-07-22 17:44 UTC (6+ messages)
issues building/running with kernel/audit.h AUDIT_DEBUG = 2
2012-07-18 20:41 UTC
PCI-DSS: Log every root actions/keystrokes but avoid passwords
2012-07-16 13:20 UTC (10+ messages)
` EXT :Re: "
Issues with auditd kernel panic and nfs mounts
2012-07-13 17:58 UTC (4+ messages)
` EXTERNAL: "
retrieve EIP/RIP for syscall in audit
2012-07-13 17:39 UTC (4+ messages)
Output of aureport in columns
2012-07-13 17:19 UTC (5+ messages)
How to capture mount event in /var/log/audit/audit.log
2012-07-09 21:57 UTC (4+ messages)
capture mount event in /var/log/audit/audit.log
2012-07-07 22:18 UTC (2+ messages)
-F dir=/nfs/path ?
2012-07-06 23:58 UTC (4+ messages)
AUTO: Gavin Appleton is out of the office. (returning 09/07/2012)
2012-07-04 17:06 UTC
auditing syscalls made 'by' an inode?
2012-07-03 22:02 UTC (8+ messages)
AUTO: Gavin Appleton is out of the office. (returning 29/06/2012)
2012-06-28 17:04 UTC
[PATCH] Audit Compilation on QEMU/Debian Squeeze
2012-06-27 17:42 UTC (2+ messages)
[PATCH v4 0/9] audit: overhaul audit_names handling to allow for retrying on path-based syscalls
2012-06-26 16:35 UTC (10+ messages)
` [PATCH v4 1/9] audit: remove unnecessary NULL ptr checks from do_path_lookup
` [PATCH v4 2/9] audit: pass in dentry to audit_copy_inode wherever possible
` [PATCH v4 3/9] audit: reverse arguments to audit_inode_child
` [PATCH v4 4/9] audit: add a new "type" field to audit_names struct
` [PATCH v4 5/9] audit: set the name_len in audit_inode for parent lookups
` [PATCH v4 6/9] audit: remove dirlen argument to audit_compare_dname_path
` [PATCH v4 7/9] audit: make audit_compare_dname_path use parent_len helper
` [PATCH v4 8/9] audit: optimize audit_compare_dname_path
` [PATCH v4 9/9] audit: overhaul __audit_inode_child to accomodate retrying
event for exited process
2012-06-26 15:46 UTC (2+ messages)
Linux Audit Framework question
2012-06-25 12:01 UTC (2+ messages)
[PATCH] auditctl Running In QEMU
2012-06-15 20:23 UTC
List of search fields?
2012-06-11 18:22 UTC (2+ messages)
Near Term Audit Road Map
2009-03-24 16:41 UTC (4+ messages)
` audisp-remote and audisp-prelude question
ausearch & aureport fail from cron
2012-06-01 18:54 UTC (3+ messages)
Audit logs rotation problem
2012-05-23 13:37 UTC (3+ messages)
Invitation to connect on LinkedIn
2012-05-18 0:12 UTC (2+ messages)
auditctl exit code
2012-05-15 8:31 UTC (4+ messages)
Rule Compatibility Issues With Old Version of Audit
2012-05-11 14:48 UTC (2+ messages)
Kernel oops+crash on repeated auditd restarts
2012-04-24 19:06 UTC (23+ messages)
[ANN] Linux Security Summit 2011 - Announcement and CFP
2012-04-12 13:36 UTC (2+ messages)
` [ANN] Linux Security Summit 2012 "
auditd.service Fedora 16 Not starting
2012-04-10 14:37 UTC
AUTO: Gavin Appleton is out of the office. (returning 09/04/2012)
2012-04-06 17:07 UTC
audit-2.2.1 released
2012-03-23 13:26 UTC
[PATCH] Have auditctl check the capability rather than the uid if we were compiled with cap-ng support. Check the euid rather than uid if we were compiled without cap-ng support
2012-03-22 15:47 UTC (5+ messages)
` Please check svn was Re: [PATCH] Have auditctl check the capability...<snip>
getuid() vs. geteuid() in auditctl
2012-03-21 21:34 UTC (5+ messages)
auparse, stdin, and AUPARSE_CB_EVENT_READY
2012-03-07 17:48 UTC (4+ messages)
[PATCH] Fix output of configure.ac
2012-03-02 20:22 UTC (2+ messages)
[PATCH] auparse: apparmor fields
2012-03-02 17:08 UTC (4+ messages)
` [PATCH v2] "
audit-2.2 released
2012-03-01 20:02 UTC
New audit package release this week
2012-02-29 0:25 UTC
[PATCH 0/2] Improvements to AVC record matching
2012-02-28 23:28 UTC (5+ messages)
` [PATCH 1/2] auvirt: Improve matching of AVC records generated by SELinux
` [PATCH 2/2] auvirt: Add support for AVC records generated by AppArmor
test patch for auditctl inter-field comparisons on euid/uid, egid/gid
2012-02-28 23:12 UTC (5+ messages)
[PATCH - linux-next] ARM: ptrace: Fix audit caused compile error
2012-02-21 13:49 UTC (5+ messages)
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox