public inbox for linux-audit@redhat.com
 help / color / mirror / Atom feed
 messages from 2013-10-24 05:55:37 to 2013-11-19 00:41:19 UTC [more...]

[PATCH v3.4] - audit cmdline on events
 2013-11-19  0:41 UTC  (2+ messages)
` [PATCH 1/2] audit: Allow auditing of proc/self/cmdline value

Audit Cross Compile Support
 2013-11-15  1:07 UTC  (3+ messages)
  ` [PATCH] Fix gen_tables.py in parsing arguments

logging changes in tty logging status
 2013-11-14 20:43 UTC  (4+ messages)

Hash ideas on adding an extended comm field
 2013-11-14 18:02 UTC  (2+ messages)

lib/audit.c (kernel)
 2013-11-14  5:45 UTC 

missing system call defs in audit(userspace)
 2013-11-14  4:42 UTC 

[PATCH 1/1] Added exe field to audit core dump signal log
 2013-11-14  3:26 UTC 

order of entries output from ausearch -i
 2013-11-13 20:35 UTC  (2+ messages)

proposing [PATCH] audit: get rid of *NO* daemon at audit_pid=0 message
 2013-11-11 19:28 UTC  (4+ messages)

[PATCH] Dropped audit_log_abend()
 2013-11-11 18:51 UTC  (3+ messages)

SIGXCPU and Auditd
 2013-11-11 10:54 UTC  (5+ messages)

[PATCH 0/4] arm64: Add audit support
 2013-11-11  7:40 UTC  (11+ messages)
` [PATCH 1/4] audit: Enable arm64 support
` [PATCH 2/4] arm64: Add audit support
` [PATCH 3/4] arm64: audit: Add AArch32 support
` [PATCH 4/4] arm64: audit: Add audit hook in ptrace/syscall_trace

[PATCH] Fixed reason field in audit signal logging
 2013-11-07 18:07 UTC  (12+ messages)

[RFC Part1 PATCH 00/20 v2] Add namespace support for audit
 2013-11-07  5:51 UTC  (28+ messages)
` [PATCH 01/20] Audit: make audit netlink socket net namespace unaware
` [PATCH 05/20] audit: make audit_pid per audit namespace
` [PATCH 07/20] aduit: make audit_nlk_portid "
  ` [PATCH 02/20] audit: introduce configure option CONFIG_AUDIT_NS
  ` [PATCH 03/20] audit: make audit_skb_queue per audit namespace
  ` [PATCH 04/20] audit: make audit_skb_hold_queue "
  ` [PATCH 06/20] audit: make kauditd_task "
  ` [PATCH 08/20] audit: make kaudit_wait queue "
  ` [PATCH 15/20] audit: Log audit pid config change in "
` [PATCH 09/20] audit: make audit_backlog_wait per "
` [PATCH 10/20] audit: allow un-init audit ns to change pid and portid only
` [PATCH 11/20] audit: use proper audit namespace in audit_receive_msg
` [PATCH 12/20] audit: use proper audit_namespace in kauditd_thread
` [PATCH 13/20] audit: introduce new audit logging interface for audit namespace
` [PATCH 14/20] audit: pass proper audit namespace to audit_log_common_recv_msg
` [PATCH 16/20] audit: allow GET, SET, USER MSG operations in audit namespace
` [PATCH 17/20] nsproxy: don't make create_new_namespaces static
` [PATCH 18/20] audit: add new message type AUDIT_CREATE_NS
` [PATCH 19/20] audit: make audit_backlog_limit per audit namespace
` [PATCH 20/20] audit: introduce /proc/<pid>/audit_backlog_limit

[PATCH] audit: convert all sessionid declaration to unsigned int
 2013-11-06 16:52 UTC 

Follow up on auditing cmdline
 2013-11-06 14:27 UTC  (3+ messages)

Auditd errors on busy hosts when rolling over log files
 2013-11-05 13:59 UTC  (4+ messages)

Question on the unset user in audit
 2013-11-05 13:07 UTC  (3+ messages)

Removing open_by_handle_at in local copy of stig.rules
 2013-11-04 14:05 UTC  (2+ messages)

[PATCH v2] audit: fix incorrect type of sessionid
 2013-11-03  1:14 UTC  (2+ messages)

[PATCH 1/7] audit: implement generic feature setting and retrieving
 2013-11-02 14:44 UTC  (3+ messages)

[PATCH 1/5] audit: fix incorrect order of log new and old feature
 2013-11-02  6:16 UTC  (7+ messages)
` [PATCH 2/5] audit: don't generate audit feature changed log when audit disabled
` [PATCH 3/5] audit: use old_lock in audit_set_feature
` [PATCH 4/5] audit: don't generate loginuid log when audit disabled
` [PATCH 5/5] audit: change the type of oldloginuid from kuid_t to unsigned long

Format specifier issue when building kernel
 2013-11-01 22:22 UTC  (14+ messages)

[PATCH] audit: don't generate loginuid log when audit disabled
 2013-11-01  1:15 UTC  (4+ messages)

[PATCH 1/3] audit: fix incorrect order of log new and old feature
 2013-11-01  0:55 UTC  (6+ messages)
` [PATCH 2/3] audit: don't generate audit feature changed log when audit disabled
` [PATCH 3/3] audit: use old_lock in audit_set_feature

[PATCH 0/4][v2] audit: Tidy up audit_context and stop bprm recursion
 2013-10-31 17:18 UTC  (6+ messages)
` [PATCH 1/4][v2] audit: Kill the unused struct audit_aux_data_capset
` [PATCH 2/4][v2] audit: remove unused envc member of audit_aux_data_execve
` [PATCH 3/4][v2] audit: move audit_aux_data_execve contents into audit_context union
` [PATCH 4/4][v2] audit: call audit_bprm() only once to add AUDIT_EXECVE information

[PATCH] audit: Add cmdline to taskinfo output
 2013-10-31 15:52 UTC  (21+ messages)

[PATCH] audit: remove useless code in audit_enable
 2013-10-31 15:22 UTC  (4+ messages)
  ` [PATCH v2] "

[PATCH 0/3] audit: Tidy up audit_context and stop bprm recursion
 2013-10-30 20:24 UTC  (4+ messages)
` [PATCH 1/3] audit: Kill the unused struct audit_aux_data_capset
` [PATCH 2/3] audit: remove unused envc member of audit_aux_data_execve
` [PATCH 3/3] audit: call audit_bprm() only once to add AUDIT_EXECVE information

ABIs, syscall tables, and the AUDIT_ARCH_* defines
 2013-10-29 21:56 UTC  (3+ messages)

What constitutes -f failure?
 2013-10-29 20:21 UTC  (3+ messages)

auid?
 2013-10-29 20:00 UTC  (3+ messages)

how to use auditd to record all user command history
 2013-10-29 14:56 UTC  (4+ messages)

how to use auditd to record all user command history
 2013-10-29 13:05 UTC  (4+ messages)

[PATCH] audit: Add cmdline to taskinfo output
 2013-10-28 23:47 UTC 

[PATCH] audit: Add cmdline to taskinfo output
 2013-10-28 21:52 UTC  (7+ messages)

auditd without a logfile?
 2013-10-28 12:31 UTC  (2+ messages)

[BUG][PATCH][RFC] audit: hang up in audit_log_start executed on auditd
 2013-10-28  9:20 UTC  (8+ messages)
        ` [BUG][PATCH] audit: audit_log_start running on auditd should not stop

Is unlink the audit equivalent of rmdir?
 2013-10-25 16:19 UTC  (2+ messages)

No useradd/groupadd in stig.rules?
 2013-10-25 16:16 UTC  (2+ messages)

Kernel audit_context and name_count problem
 2013-10-25 15:04 UTC 

SYSCALL and you...err...and me
 2013-10-25 12:48 UTC  (3+ messages)

How to exclude directories from auditing?
 2013-10-25 12:44 UTC  (2+ messages)

How to identify failed syscalls
 2013-10-25 12:41 UTC  (2+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox