public inbox for linux-audit@redhat.com
 help / color / mirror / Atom feed
 messages from 2013-07-17 03:54:21 to 2013-10-24 05:55:37 UTC [more...]

[BUG][PATCH][RFC] audit: hang up in audit_log_start executed on auditd
 2013-10-24  5:55 UTC  (4+ messages)
        ` [BUG][PATCH] audit: audit_log_start running on auditd should not stop

[PATCH] audit: remove useless code in audit_enable
 2013-10-24  2:59 UTC 

[PATCH] audit: change pid to portid for audit_reply
 2013-10-24  0:42 UTC  (3+ messages)

[PATCH] audit: Add cmdline to taskinfo output
 2013-10-23 20:40 UTC 

[PATCH] audit: don't create audit log when audit_backlog_limit is zero
 2013-10-23  0:59 UTC  (3+ messages)
` allow unlimited audit_backlog_limit [was: Re: [PATCH] audit: don't create audit log when audit_backlog_limit is zero]

audit_ftype_to_name?
 2013-10-22 21:26 UTC  (6+ messages)
  ` 12/31/1969

how to use auditd to record all user command history
 2013-10-20  1:03 UTC 

[PATCH] audit/userspace: add support for the parisc architecture
 2013-10-15 17:56 UTC 

Auditing only when auid and uid differ
 2013-10-10  7:25 UTC  (4+ messages)

how to use auditd to record all user command history
 2013-10-09 23:56 UTC  (11+ messages)

[PATCH] audit: update AUDIT_INODE filter rule to comparator function
 2013-10-09  0:31 UTC 

[PATCH] audit: suppress stock memalloc failure warnings since already managed
 2013-10-09  0:26 UTC 

audit + php-fpm
 2013-10-07 18:45 UTC  (2+ messages)

[PATCH 0/2] netlink related fixes
 2013-10-01  6:33 UTC  (6+ messages)
` [PATCH 1/2] audit: fix info leak in AUDIT_GET requests
` [PATCH 2/2] audit: use nlmsg_len() to get message payload length

[Fwd: [PATCH] audit: remove duplicate inclusion of the netlink header]
 2013-10-01  0:10 UTC  (2+ messages)

Generic audit set/get and "splitlog" patches
 2013-09-27  1:00 UTC 

auditctl rule to monitor dir only (not all sub dir and files etc..)
 2013-09-26 18:58 UTC  (3+ messages)

[PATCH 3/3] Audit Cross Compile Support
 2013-09-26 18:55 UTC 

[PATCH 2/3] Audit Cross Compile Support
 2013-09-26 18:55 UTC 

[PATCH 1/3] Audit Cross Compile Support
 2013-09-26 18:54 UTC 

Audit Cross Compile Support
 2013-09-26 18:54 UTC  (9+ messages)
  ` [PATCH 0/3] "

[PATCH v2 1/1] audit_alloc: clear TIF_SYSCALL_AUDIT if !audit_context
 2013-09-23 21:55 UTC  (4+ messages)

[PATCH 0/8] Audit backlog queue fixes related to soft lockup
 2013-09-23 16:38 UTC  (15+ messages)
  ` [PATCH 1/8] audit: avoid soft lockup due to audit_log_start() incorrect loop termination
  ` [PATCH 2/8] audit: reset audit backlog wait time after error recovery
  ` [PATCH 3/8] audit: make use of remaining sleep time from wait_for_auditd
  ` [PATCH 4/8] audit: efficiency fix 1: only wake up if queue shorter than backlog limit
  ` [PATCH 5/8] audit: efficiency fix 2: request exclusive wait since all need same resource
  ` [PATCH 6/8] audit: add boot option to override default backlog limit
  ` [PATCH 7/8] audit: clean up AUDIT_GET/SET local variables and future-proof API
  ` [PATCH 8/8] audit: add audit_backlog_wait_time configuration option

[PATCH] Audit: remove duplicate comments
 2013-09-23 15:28 UTC  (3+ messages)

[PATCH] audit: audit on the future execution of a binary
 2013-09-20 16:18 UTC  (4+ messages)

[PATCH] audit: remove newline accidentally added during session id helper refactor
 2013-09-20 16:08 UTC  (2+ messages)

When do audit log calls fail?
 2013-09-19 21:23 UTC  (4+ messages)

user message limits
 2013-09-18 15:10 UTC  (8+ messages)
            ` spurious \n in session id helper [was: Re: user message limits]

[PATCH] audit: format user messages to size of MAX_AUDIT_MESSAGE_LENGTH
 2013-09-18  2:55 UTC 

[PATCH 00/12] RFC: steps to make audit pid namespace-safe
 2013-09-14 18:10 UTC  (41+ messages)
` [PATCH 01/12] audit: Kill the unused struct audit_aux_data_capset
` [PATCH 02/12] audit: fix netlink portid naming and types
` [PATCH 03/12] pid: get ppid pid_t of task in init_pid_ns safely
        ` [PATCH 1/3] apparmor: fix capability to not use the current task, during reporting
        ` [PATCH 2/3] apparmor: remove tsk field from the apparmor_audit_struct
        ` [PATCH 03/3] apparmor: remove parent task info from audit logging
` [PATCH 04/12] audit: convert PPIDs to the inital PID namespace
` [PATCH 05/12] pid: get pid_t of task in init_pid_ns correctly
` [PATCH 06/12] audit: Simplify and correct audit_log_capset
` [PATCH 07/12] audit: store audit_pid as a struct pid pointer
` [PATCH 08/12] audit: anchor all pid references in the initial pid namespace
` [PATCH 09/12] pid: modify task_pid_nr to work without task->pid
` [PATCH 10/12] pid: modify task_tgid_nr to work without task->tgid
` [PATCH 11/12] pid: rewrite task helper functions avoiding task->pid and task->tgid
            ` audit looks unmaintained? [was: Re: [PATCH 11/12] pid: rewrite task helper functions avoiding task->pid and task->tgid]
` [PATCH 12/12] pid: mark struct task const in helper functions

Can't get syslog built-in plugin to post messages to syslog
 2013-09-11  0:17 UTC  (2+ messages)

[PATCH] audit: do not reject all AUDIT_INODE filter types
 2013-09-04 19:01 UTC 

Audit of physical users
 2013-09-03 21:04 UTC  (2+ messages)

Benchmarking the performance impact of auditd
 2013-09-01  2:19 UTC  (5+ messages)

Cross Compiling Header Generation Rework [Patch 2/3]
 2013-08-23 16:12 UTC 

Cross Compiling Header Generation Rework [Patch 3/3]
 2013-08-23 16:12 UTC 

Cross Compiling Header Generation Rework [Patch 1/3]
 2013-08-23 16:12 UTC 

The relationship between audit rules
 2013-08-21 21:35 UTC  (4+ messages)

Audit log file perms
 2013-08-21 20:09 UTC  (4+ messages)

[PATCH] audit: printk USER_AVC messages when audit isn't enabled
 2013-08-20 14:45 UTC  (4+ messages)

file watch question
 2013-08-16 22:08 UTC  (3+ messages)

auditd start failure
 2013-08-16 18:53 UTC  (4+ messages)

Auditing USB Question
 2013-08-02 14:30 UTC  (6+ messages)

[PATCH] audit: listen in all network namespaces
 2013-08-02 13:21 UTC  (9+ messages)

Rational behind RefuseManualStop=yes in auditd.service
 2013-07-30 20:25 UTC  (2+ messages)

audit 2.3.2 released
 2013-07-29 22:14 UTC 

How to make audit match only one rule?
 2013-07-29 21:47 UTC  (3+ messages)

why auid always unset?
 2013-07-26 21:20 UTC  (7+ messages)

[PATCH] kaudit: prevent an older auditd shutdown from orphaning a newer auditd startup
 2013-07-18  0:40 UTC 

audit-1.8 on redhat 5 does not accept >=
 2013-07-17 22:52 UTC 


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox