public inbox for linux-audit@redhat.com
 help / color / mirror / Atom feed
 messages from 2012-08-01 07:00:22 to 2012-10-24 16:16:37 UTC [more...]

[PATCH] Audit: do not print error when SELinux disabled
 2012-10-24 16:10 UTC  (4+ messages)

Help on Audit Rules
 2012-10-18 17:02 UTC  (9+ messages)

linux-audit: reconstruct path names from syscall events?
 2012-10-11 17:27 UTC  (10+ messages)

[PATCH] audit: armv6l added to machintab for Raspberry Pi
 2012-10-09  1:06 UTC 

[PATCH] audit: grab a reference to context->pwd when it's cached
 2012-10-08 18:48 UTC  (26+ messages)

Recursive chown/chmod not showing enclosing directory
 2012-10-08 18:06 UTC  (3+ messages)

[PATCH v7 00/49] audit/getname/estale patch series
 2012-10-02 16:55 UTC  (56+ messages)
` [PATCH v7 01/49] audit: remove unnecessary NULL ptr checks from do_path_lookup
` [PATCH v7 02/49] audit: pass in dentry to audit_copy_inode wherever possible
` [PATCH v7 03/49] audit: no need to walk list in audit_inode if name is NULL
` [PATCH v7 04/49] audit: reverse arguments to audit_inode_child
` [PATCH v7 05/49] audit: add a new "type" field to audit_names struct
` [PATCH v7 06/49] audit: set the name_len in audit_inode for parent lookups
` [PATCH v7 07/49] audit: remove dirlen argument to audit_compare_dname_path
` [PATCH v7 08/49] audit: make audit_compare_dname_path use parent_len helper
` [PATCH v7 09/49] audit: optimize audit_compare_dname_path
` [PATCH v7 10/49] audit: overhaul __audit_inode_child to accomodate retrying
` [PATCH v7 11/49] vfs: allocate page instead of names_cache buffer in mount_block_root
` [PATCH v7 12/49] vfs: make dir_name arg to do_mount a const char *
` [PATCH v7 13/49] acct: constify the name arg to acct_on
` [PATCH v7 14/49] vfs: define getname_info struct and have getname() return it
` [PATCH v7 15/49] audit: allow audit code to satisfy getname requests from its names_list
` [PATCH v7 16/49] vfs: turn do_path_lookup into wrapper around getname_info variant
` [PATCH v7 17/49] vfs: make path_openat take a getname_info pointer
` [PATCH v7 18/49] audit: make audit_inode take getname_info
` [PATCH v7 19/49] vfs: embed getname_info inside of names_cache allocation if possible
` [PATCH v7 20/49] vfs: unexport getname and putname symbols
` [PATCH v7 21/49] vfs: add a retry_estale helper function to handle retries on ESTALE
` [PATCH v7 22/49] vfs: make fstatat retry on ESTALE errors from getattr call
` [PATCH v7 23/49] vfs: fix readlinkat to retry on ESTALE
` [PATCH v7 24/49] vfs: add new "reval" argument to kern_path_create and user_path_create
` [PATCH v7 25/49] vfs: fix mknodat to retry on ESTALE errors
` [PATCH v7 26/49] vfs: fix mkdir "
` [PATCH v7 27/49] vfs: fix symlinkat "
` [PATCH v7 28/49] vfs: fix linkat "
` [PATCH v7 29/49] vfs: add a reval argument to user_path_parent
` [PATCH v7 30/49] vfs: make rmdir retry on ESTALE errors
` [PATCH v7 31/49] vfs: make do_unlinkat "
` [PATCH v7 32/49] vfs: fix renameat to "
` [PATCH v7 33/49] vfs: have do_sys_truncate retry once on an ESTALE error
` [PATCH v7 34/49] vfs: have faccessat "
` [PATCH v7 35/49] vfs: have chdir retry lookup and call once on "
` [PATCH v7 36/49] vfs: make chroot retry "
` [PATCH v7 37/49] vfs: make fchmodat retry once on ESTALE errors
` [PATCH v7 38/49] vfs: make fchownat "
` [PATCH v7 39/49] vfs: convert do_filp_open to use retry_estale helper
` [PATCH v7 40/49] vfs: convert do_file_open_root "
` [PATCH v7 41/49] vfs: allow utimensat() calls to retry once on an ESTALE error
` [PATCH v7 42/49] vfs: allow setxattr to retry once on ESTALE errors
` [PATCH v7 43/49] vfs: allow lsetxattr() "
` [PATCH v7 44/49] vfs: make getxattr retry once on an ESTALE error
` [PATCH v7 45/49] vfs: make lgetxattr retry once on ESTALE
` [PATCH v7 46/49] vfs: make listxattr retry once on ESTALE error
` [PATCH v7 47/49] vfs: make llistxattr "
` [PATCH v7 48/49] vfs: make removexattr retry once on ESTALE
` [PATCH v7 49/49] vfs: make lremovexattr retry once on ESTALE error

'Nested rule' error message when getting auditd set up on my server
 2012-09-29 22:49 UTC 

Capturing USB insertions and removal events with auditd
 2012-09-21 15:22 UTC  (2+ messages)

[PATCH v2 00/10] vfs: getname/putname overhaul
 2012-09-20 18:38 UTC  (16+ messages)
` [PATCH v2 01/10] vfs: allocate page instead of names_cache buffer in mount_block_root
` [PATCH v2 02/10] vfs: make dir_name arg to do_mount a const char *
` [PATCH v2 03/10] acct: constify the name arg to acct_on
` [PATCH v2 04/10] vfs: define getname_info struct and have getname() return it
` [PATCH v2 05/10] audit: allow audit code to satisfy getname requests from its names_list
` [PATCH v2 06/10] vfs: turn do_path_lookup into wrapper around getname_info variant
` [PATCH v2 07/10] vfs: make path_openat take a getname_info pointer
` [PATCH v2 08/10] audit: make audit_inode take getname_info
` [PATCH v2 09/10] vfs: embed getname_info inside of names_cache allocation if possible
` [PATCH v2 10/10] vfs: unexport getname and putname symbols

Excluding events by command
 2012-09-18 18:40 UTC  (7+ messages)

[PATCH 0/5] Build time disabling of auditd network listener
 2012-09-11 17:10 UTC  (7+ messages)
` [PATCH 3/5] Move periodic watcher into auditd-listen.c
` [PATCH 4/5] Consolidate periodic handler code
` [PATCH 5/5] Conditionally build auditd network listener support

[PATCH v1 00/10] vfs: getname/putname overhaul
 2012-09-08 15:38 UTC  (16+ messages)
` [PATCH v1 01/10] vfs: allocate page instead of names_cache buffer in mount_block_root
` [PATCH v1 02/10] vfs: make dir_name arg to do_mount a const char *
` [PATCH v1 03/10] acct: constify the name arg to acct_on
` [PATCH v1 04/10] vfs: define getname_info struct and have getname() return it
` [PATCH v1 05/10] audit: allow audit code to satisfy getname requests from its names_list
` [PATCH v1 06/10] vfs: turn do_path_lookup into wrapper around getname_info variant
` [PATCH v1 07/10] vfs: make path_openat take a getname_info pointer
` [PATCH v1 08/10] audit: make audit_inode take getname_info
` [PATCH v1 09/10] vfs: embed getname_info inside of names_cache allocation if possible
` [PATCH v1 10/10] vfs: unexport getname and putname symbols

[PATCH v6 00/10] audit: overhaul audit_names handling to allow for retrying on path-based syscalls
 2012-09-07 11:23 UTC  (11+ messages)
` [PATCH v6 01/10] audit: remove unnecessary NULL ptr checks from do_path_lookup
` [PATCH v6 02/10] audit: pass in dentry to audit_copy_inode wherever possible
` [PATCH v6 03/10] audit: no need to walk list in audit_inode if name is NULL
` [PATCH v6 04/10] audit: reverse arguments to audit_inode_child
` [PATCH v6 05/10] audit: add a new "type" field to audit_names struct
` [PATCH v6 06/10] audit: set the name_len in audit_inode for parent lookups
` [PATCH v6 07/10] audit: remove dirlen argument to audit_compare_dname_path
` [PATCH v6 08/10] audit: make audit_compare_dname_path use parent_len helper
` [PATCH v6 09/10] audit: optimize audit_compare_dname_path
` [PATCH v6 10/10] audit: overhaul __audit_inode_child to accomodate retrying

[PATCH] audit: audit on the future execution of a binary
 2012-09-06 21:34 UTC  (2+ messages)

max number of rules?
 2012-08-27 18:45 UTC  (2+ messages)

[PATCH] auditctl Running In QEMU
 2012-08-27 18:24 UTC  (3+ messages)

[PATCH] Audit Compilation on QEMU/Debian Squeeze
 2012-08-27 14:30 UTC  (2+ messages)

auparse delayed event emittance
 2012-08-27 13:07 UTC  (2+ messages)

[PATCH] Support for auditing on the actions of a not-yet-executed process
 2012-08-27 12:54 UTC  (2+ messages)

AUTO: Gavin Appleton is out of the office. (returning 23/08/2012)
 2012-08-21 17:07 UTC 

GPL-less alternatives to the Audit Userland
 2012-08-20 23:06 UTC  (3+ messages)

cross-compiling difficulty with on-the-fly gen/build/use paradigm
 2012-08-20 16:47 UTC  (3+ messages)

AUTO: Gavin Appleton is out of the office. (returning 20/08/2012)
 2012-08-18 17:04 UTC 

aureport and command lines
 2012-08-18 13:19 UTC  (2+ messages)

Advice on enriching logs with user and group names before moving them to a central log repository
 2012-08-18 13:17 UTC  (9+ messages)

100% reliable Oops
 2012-08-14  1:04 UTC 

missing user name
 2012-08-03 19:14 UTC  (6+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox