public inbox for linux-audit@redhat.com
 help / color / mirror / Atom feed
 messages from 2013-09-26 18:25:32 to 2013-11-05 14:02:56 UTC [more...]

SIGXCPU and Auditd
 2013-11-05 14:02 UTC  (4+ messages)

Auditd errors on busy hosts when rolling over log files
 2013-11-05 13:59 UTC  (4+ messages)

Question on the unset user in audit
 2013-11-05 13:07 UTC  (3+ messages)

[RFC Part1 PATCH 00/20 v2] Add namespace support for audit
 2013-11-05  8:56 UTC  (26+ messages)
` [PATCH 01/20] Audit: make audit netlink socket net namespace unaware
` [PATCH 05/20] audit: make audit_pid per audit namespace
` [PATCH 07/20] aduit: make audit_nlk_portid "
  ` [PATCH 02/20] audit: introduce configure option CONFIG_AUDIT_NS
  ` [PATCH 03/20] audit: make audit_skb_queue per audit namespace
  ` [PATCH 04/20] audit: make audit_skb_hold_queue "
  ` [PATCH 06/20] audit: make kauditd_task "
  ` [PATCH 08/20] audit: make kaudit_wait queue "
  ` [PATCH 15/20] audit: Log audit pid config change in "
` [PATCH 09/20] audit: make audit_backlog_wait per "
` [PATCH 10/20] audit: allow un-init audit ns to change pid and portid only
` [PATCH 11/20] audit: use proper audit namespace in audit_receive_msg
` [PATCH 12/20] audit: use proper audit_namespace in kauditd_thread
` [PATCH 13/20] audit: introduce new audit logging interface for audit namespace
` [PATCH 14/20] audit: pass proper audit namespace to audit_log_common_recv_msg
` [PATCH 16/20] audit: allow GET, SET, USER MSG operations in audit namespace
` [PATCH 17/20] nsproxy: don't make create_new_namespaces static
` [PATCH 18/20] audit: add new message type AUDIT_CREATE_NS
` [PATCH 19/20] audit: make audit_backlog_limit per audit namespace
` [PATCH 20/20] audit: introduce /proc/<pid>/audit_backlog_limit

Removing open_by_handle_at in local copy of stig.rules
 2013-11-04 14:05 UTC  (2+ messages)

[PATCH v2] audit: fix incorrect type of sessionid
 2013-11-03  1:14 UTC  (2+ messages)

[PATCH 1/7] audit: implement generic feature setting and retrieving
 2013-11-02 14:44 UTC  (3+ messages)

[PATCH 1/5] audit: fix incorrect order of log new and old feature
 2013-11-02  6:16 UTC  (7+ messages)
` [PATCH 2/5] audit: don't generate audit feature changed log when audit disabled
` [PATCH 3/5] audit: use old_lock in audit_set_feature
` [PATCH 4/5] audit: don't generate loginuid log when audit disabled
` [PATCH 5/5] audit: change the type of oldloginuid from kuid_t to unsigned long

Format specifier issue when building kernel
 2013-11-01 22:22 UTC  (14+ messages)

[PATCH] audit: don't generate loginuid log when audit disabled
 2013-11-01  1:15 UTC  (4+ messages)

[PATCH 1/3] audit: fix incorrect order of log new and old feature
 2013-11-01  0:55 UTC  (6+ messages)
` [PATCH 2/3] audit: don't generate audit feature changed log when audit disabled
` [PATCH 3/3] audit: use old_lock in audit_set_feature

[PATCH 0/4][v2] audit: Tidy up audit_context and stop bprm recursion
 2013-10-31 17:18 UTC  (6+ messages)
` [PATCH 1/4][v2] audit: Kill the unused struct audit_aux_data_capset
` [PATCH 2/4][v2] audit: remove unused envc member of audit_aux_data_execve
` [PATCH 3/4][v2] audit: move audit_aux_data_execve contents into audit_context union
` [PATCH 4/4][v2] audit: call audit_bprm() only once to add AUDIT_EXECVE information

[PATCH] audit: Add cmdline to taskinfo output
 2013-10-31 15:52 UTC  (21+ messages)

[PATCH] audit: remove useless code in audit_enable
 2013-10-31 15:22 UTC  (4+ messages)
  ` [PATCH v2] "

[PATCH 0/3] audit: Tidy up audit_context and stop bprm recursion
 2013-10-30 20:24 UTC  (4+ messages)
` [PATCH 1/3] audit: Kill the unused struct audit_aux_data_capset
` [PATCH 2/3] audit: remove unused envc member of audit_aux_data_execve
` [PATCH 3/3] audit: call audit_bprm() only once to add AUDIT_EXECVE information

ABIs, syscall tables, and the AUDIT_ARCH_* defines
 2013-10-29 21:56 UTC  (3+ messages)

What constitutes -f failure?
 2013-10-29 20:21 UTC  (3+ messages)

auid?
 2013-10-29 20:00 UTC  (3+ messages)

how to use auditd to record all user command history
 2013-10-29 14:56 UTC  (12+ messages)

how to use auditd to record all user command history
 2013-10-29 13:05 UTC  (4+ messages)

[PATCH] audit: Add cmdline to taskinfo output
 2013-10-28 23:47 UTC 

[PATCH] audit: Add cmdline to taskinfo output
 2013-10-28 21:52 UTC  (7+ messages)

auditd without a logfile?
 2013-10-28 12:31 UTC  (2+ messages)

[BUG][PATCH][RFC] audit: hang up in audit_log_start executed on auditd
 2013-10-28  9:20 UTC  (8+ messages)
        ` [BUG][PATCH] audit: audit_log_start running on auditd should not stop

Is unlink the audit equivalent of rmdir?
 2013-10-25 16:19 UTC  (2+ messages)

No useradd/groupadd in stig.rules?
 2013-10-25 16:16 UTC  (2+ messages)

Kernel audit_context and name_count problem
 2013-10-25 15:04 UTC 

SYSCALL and you...err...and me
 2013-10-25 12:48 UTC  (3+ messages)

How to exclude directories from auditing?
 2013-10-25 12:44 UTC  (2+ messages)

How to identify failed syscalls
 2013-10-25 12:41 UTC  (2+ messages)

[PATCH] audit: change pid to portid for audit_reply
 2013-10-24  0:42 UTC  (3+ messages)

[PATCH] audit: don't create audit log when audit_backlog_limit is zero
 2013-10-23  0:59 UTC  (3+ messages)
` allow unlimited audit_backlog_limit [was: Re: [PATCH] audit: don't create audit log when audit_backlog_limit is zero]

audit_ftype_to_name?
 2013-10-22 21:26 UTC  (6+ messages)
  ` 12/31/1969

[PATCH] audit/userspace: add support for the parisc architecture
 2013-10-15 17:56 UTC 

Auditing only when auid and uid differ
 2013-10-10  7:25 UTC  (4+ messages)

[PATCH] audit: update AUDIT_INODE filter rule to comparator function
 2013-10-09  0:31 UTC 

[PATCH] audit: suppress stock memalloc failure warnings since already managed
 2013-10-09  0:26 UTC 

audit + php-fpm
 2013-10-07 18:45 UTC  (2+ messages)

[PATCH 0/2] netlink related fixes
 2013-10-01  6:33 UTC  (6+ messages)
` [PATCH 1/2] audit: fix info leak in AUDIT_GET requests
` [PATCH 2/2] audit: use nlmsg_len() to get message payload length

[Fwd: [PATCH] audit: remove duplicate inclusion of the netlink header]
 2013-10-01  0:10 UTC  (2+ messages)

Generic audit set/get and "splitlog" patches
 2013-09-27  1:00 UTC 

auditctl rule to monitor dir only (not all sub dir and files etc..)
 2013-09-26 18:58 UTC  (3+ messages)

[PATCH 3/3] Audit Cross Compile Support
 2013-09-26 18:55 UTC 

[PATCH 2/3] Audit Cross Compile Support
 2013-09-26 18:55 UTC 

[PATCH 1/3] Audit Cross Compile Support
 2013-09-26 18:54 UTC 

Audit Cross Compile Support
 2013-09-26 18:54 UTC  (3+ messages)
  ` [PATCH 0/3] "


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox