public inbox for linux-audit@redhat.com
 help / color / mirror / Atom feed
 messages from 2013-08-30 19:56:46 to 2013-10-31 03:52:28 UTC [more...]

[RFC Part1 PATCH 00/20 v2] Add namespace support for audit
 2013-10-31  3:52 UTC  (22+ messages)
` [PATCH 01/20] Audit: make audit netlink socket net namespace unaware
  ` [PATCH 02/20] audit: introduce configure option CONFIG_AUDIT_NS
  ` [PATCH 03/20] audit: make audit_skb_queue per audit namespace
  ` [PATCH 04/20] audit: make audit_skb_hold_queue "
  ` [PATCH 06/20] audit: make kauditd_task "
  ` [PATCH 08/20] audit: make kaudit_wait queue "
  ` [PATCH 15/20] audit: Log audit pid config change in "
` [PATCH 05/20] audit: make audit_pid per "
` [PATCH 07/20] aduit: make audit_nlk_portid "
` [PATCH 09/20] audit: make audit_backlog_wait "
` [PATCH 10/20] audit: allow un-init audit ns to change pid and portid only
` [PATCH 11/20] audit: use proper audit namespace in audit_receive_msg
` [PATCH 12/20] audit: use proper audit_namespace in kauditd_thread
` [PATCH 13/20] audit: introduce new audit logging interface for audit namespace
` [PATCH 14/20] audit: pass proper audit namespace to audit_log_common_recv_msg
` [PATCH 16/20] audit: allow GET, SET, USER MSG operations in audit namespace
` [PATCH 17/20] nsproxy: don't make create_new_namespaces static
` [PATCH 18/20] audit: add new message type AUDIT_CREATE_NS
` [PATCH 19/20] audit: make audit_backlog_limit per audit namespace
` [PATCH 20/20] audit: introduce /proc/<pid>/audit_backlog_limit

[PATCH] audit: Add cmdline to taskinfo output
 2013-10-30 21:52 UTC  (14+ messages)

[PATCH 0/3] audit: Tidy up audit_context and stop bprm recursion
 2013-10-30 20:24 UTC  (4+ messages)
` [PATCH 1/3] audit: Kill the unused struct audit_aux_data_capset
` [PATCH 2/3] audit: remove unused envc member of audit_aux_data_execve
` [PATCH 3/3] audit: call audit_bprm() only once to add AUDIT_EXECVE information

ABIs, syscall tables, and the AUDIT_ARCH_* defines
 2013-10-29 21:56 UTC  (3+ messages)

What constitutes -f failure?
 2013-10-29 20:21 UTC  (3+ messages)

auid?
 2013-10-29 20:00 UTC  (3+ messages)

how to use auditd to record all user command history
 2013-10-29 14:56 UTC  (12+ messages)

how to use auditd to record all user command history
 2013-10-29 13:05 UTC  (4+ messages)

Format specifier issue when building kernel
 2013-10-29  3:55 UTC  (5+ messages)

[PATCH] audit: Add cmdline to taskinfo output
 2013-10-28 23:47 UTC 

[PATCH] audit: Add cmdline to taskinfo output
 2013-10-28 21:52 UTC  (7+ messages)

auditd without a logfile?
 2013-10-28 12:31 UTC  (2+ messages)

[BUG][PATCH][RFC] audit: hang up in audit_log_start executed on auditd
 2013-10-28  9:20 UTC  (8+ messages)
        ` [BUG][PATCH] audit: audit_log_start running on auditd should not stop

[PATCH] audit: remove useless code in audit_enable
 2013-10-25 18:33 UTC  (2+ messages)

Is unlink the audit equivalent of rmdir?
 2013-10-25 16:19 UTC  (2+ messages)

No useradd/groupadd in stig.rules?
 2013-10-25 16:16 UTC  (2+ messages)

Kernel audit_context and name_count problem
 2013-10-25 15:04 UTC 

SYSCALL and you...err...and me
 2013-10-25 12:48 UTC  (3+ messages)

How to exclude directories from auditing?
 2013-10-25 12:44 UTC  (2+ messages)

How to identify failed syscalls
 2013-10-25 12:41 UTC  (2+ messages)

[PATCH] audit: change pid to portid for audit_reply
 2013-10-24  0:42 UTC  (3+ messages)

[PATCH] audit: don't create audit log when audit_backlog_limit is zero
 2013-10-23  0:59 UTC  (3+ messages)
` allow unlimited audit_backlog_limit [was: Re: [PATCH] audit: don't create audit log when audit_backlog_limit is zero]

audit_ftype_to_name?
 2013-10-22 21:26 UTC  (6+ messages)
  ` 12/31/1969

[PATCH] audit/userspace: add support for the parisc architecture
 2013-10-15 17:56 UTC 

Auditing only when auid and uid differ
 2013-10-10  7:25 UTC  (4+ messages)

[PATCH] audit: update AUDIT_INODE filter rule to comparator function
 2013-10-09  0:31 UTC 

[PATCH] audit: suppress stock memalloc failure warnings since already managed
 2013-10-09  0:26 UTC 

audit + php-fpm
 2013-10-07 18:45 UTC  (2+ messages)

[PATCH 0/2] netlink related fixes
 2013-10-01  6:33 UTC  (6+ messages)
` [PATCH 1/2] audit: fix info leak in AUDIT_GET requests
` [PATCH 2/2] audit: use nlmsg_len() to get message payload length

[Fwd: [PATCH] audit: remove duplicate inclusion of the netlink header]
 2013-10-01  0:10 UTC  (2+ messages)

Generic audit set/get and "splitlog" patches
 2013-09-27  1:00 UTC 

auditctl rule to monitor dir only (not all sub dir and files etc..)
 2013-09-26 18:58 UTC  (3+ messages)

[PATCH 3/3] Audit Cross Compile Support
 2013-09-26 18:55 UTC 

[PATCH 2/3] Audit Cross Compile Support
 2013-09-26 18:55 UTC 

[PATCH 1/3] Audit Cross Compile Support
 2013-09-26 18:54 UTC 

Audit Cross Compile Support
 2013-09-26 18:54 UTC  (9+ messages)
  ` [PATCH 0/3] "

[PATCH v2 1/1] audit_alloc: clear TIF_SYSCALL_AUDIT if !audit_context
 2013-09-23 21:55 UTC  (4+ messages)

[PATCH 0/8] Audit backlog queue fixes related to soft lockup
 2013-09-23 16:38 UTC  (15+ messages)
  ` [PATCH 1/8] audit: avoid soft lockup due to audit_log_start() incorrect loop termination
  ` [PATCH 2/8] audit: reset audit backlog wait time after error recovery
  ` [PATCH 3/8] audit: make use of remaining sleep time from wait_for_auditd
  ` [PATCH 4/8] audit: efficiency fix 1: only wake up if queue shorter than backlog limit
  ` [PATCH 5/8] audit: efficiency fix 2: request exclusive wait since all need same resource
  ` [PATCH 6/8] audit: add boot option to override default backlog limit
  ` [PATCH 7/8] audit: clean up AUDIT_GET/SET local variables and future-proof API
  ` [PATCH 8/8] audit: add audit_backlog_wait_time configuration option

[PATCH] Audit: remove duplicate comments
 2013-09-23 15:28 UTC  (3+ messages)

[PATCH] audit: audit on the future execution of a binary
 2013-09-20 16:18 UTC  (4+ messages)

[PATCH] audit: remove newline accidentally added during session id helper refactor
 2013-09-20 16:08 UTC  (2+ messages)

When do audit log calls fail?
 2013-09-19 21:23 UTC  (4+ messages)

user message limits
 2013-09-18 15:10 UTC  (8+ messages)
            ` spurious \n in session id helper [was: Re: user message limits]

[PATCH] audit: format user messages to size of MAX_AUDIT_MESSAGE_LENGTH
 2013-09-18  2:55 UTC 

[PATCH 00/12] RFC: steps to make audit pid namespace-safe
 2013-09-14 18:10 UTC  (18+ messages)
` [PATCH 03/12] pid: get ppid pid_t of task in init_pid_ns safely
        ` [PATCH 1/3] apparmor: fix capability to not use the current task, during reporting
        ` [PATCH 2/3] apparmor: remove tsk field from the apparmor_audit_struct
        ` [PATCH 03/3] apparmor: remove parent task info from audit logging
` [PATCH 11/12] pid: rewrite task helper functions avoiding task->pid and task->tgid
  ` audit looks unmaintained? [was: Re: [PATCH 11/12] pid: rewrite task helper functions avoiding task->pid and task->tgid]

Can't get syslog built-in plugin to post messages to syslog
 2013-09-11  0:17 UTC  (2+ messages)

[PATCH] audit: do not reject all AUDIT_INODE filter types
 2013-09-04 19:01 UTC 

Audit of physical users
 2013-09-03 21:04 UTC  (2+ messages)

Benchmarking the performance impact of auditd
 2013-09-01  2:19 UTC  (3+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox