linux-audit.redhat.com archive mirror
 help / color / mirror / Atom feed
 messages from 2014-03-01 04:50:19 to 2014-04-10 11:25:42 UTC [more...]

libauparse exporting clear_config()
 2014-04-10 11:25 UTC  (2+ messages)

Repository of audit events
 2014-04-10  1:26 UTC  (6+ messages)

[PATCH for v3.14] AUDIT: Allow login in non-init namespaces
 2014-04-10  0:18 UTC  (6+ messages)

How do I get complete list of audit event types
 2014-04-09 16:23 UTC  (5+ messages)

[Fwd: [Bug 73511] Invalid arguments passed to audit_log_string() routine resulting in embedded spaces in op= values]
 2014-04-08 16:28 UTC  (2+ messages)

finit_module
 2014-04-07 18:29 UTC  (7+ messages)

ausearch question
 2014-04-07 15:53 UTC  (3+ messages)

Linux bug report submitted
 2014-04-04 15:59 UTC  (2+ messages)
` audit: invalid op= values for rules [was: Re: Linux bug report submitted]

[RESEND PATCH 0/2] MIPS syscall auditing patches
 2014-04-03 15:13 UTC  (11+ messages)
` [RESEND PATCH 1/2] "
` [RESEND PATCH 2/2] "

Difference between "-a exit,always" and "-a always,exit"?
 2014-04-03 13:25 UTC  (5+ messages)

[PATCH] integrity: get comm using lock to avoid race in string printing
 2014-04-02 18:52 UTC  (8+ messages)
          ` oraphaned keywords in audit log text [was: Re: [PATCH] integrity: get comm using lock to avoid race in string] printing

[PATCH] netlink: have netlink per-protocol bind function return an error code
 2014-04-01 22:21 UTC  (20+ messages)
      ` [PATCH][v3] "
        ` [PATCH][v4] "
      ` [PATCH][v5] "
          ` v6 superceded it [was: Re: [PATCH][v5] netlink: have netlink per-protocol bind function return an error code.]
      ` [PATCH][v6] netlink: have netlink per-protocol bind function return an error code
      ` unbind [was: Re: [PATCH] netlink: have netlink per-protocol bind function return] "
      ` [PATCH 0/3] netlink: per-protocol bind fixup/enhancement set
        ` [PATCH 1/3] netlink: simplify nfnetlink_bind
        ` [PATCH 2/3][v7] netlink: have netlink per-protocol bind function return an error code
        ` [PATCH 3/3] netlink: implement unbind to netlink_setsockopt NETLINK_DROP_MEMBERSHIP

[PATCH] ausearch: Add checkpoint capability and have incomplete logs carry forward when processing multiple audit.log files
 2014-03-27 14:18 UTC  (4+ messages)

[PATCH] netlink: simplify nfnetlink_bind
 2014-03-24 13:56 UTC  (3+ messages)

[PATCH 1/4] SH: define syscall_get_arch() for superh
 2014-03-24  1:03 UTC  (15+ messages)
` [PATCH 2/4] UM: implement syscall_get_arch()
` [PATCH 3/4] ARCH: AUDIT: implement syscall_get_arch for all arches
` [PATCH 4/4] ARCH: AUDIT: audit_syscall_entry() should not require the arch

[PATCH 1/2] syscall_get_arch: remove useless function arguments
 2014-03-21 17:37 UTC  (4+ messages)
` [PATCH 2/2] audit: use uapi/linux/audit.h for AUDIT_ARCH declarations

[PATCH v2 0/3] audit(userspace): Add/Improve arm/aarch64 support
 2014-03-20  0:38 UTC  (3+ messages)
` [PATCH v3 0/4] audit(userspace): Improve "

race in audit_log_untrusted_string for task_struct::comm
 2014-03-18 17:54 UTC  (6+ messages)
` [PATCH] audit: get comm using lock to avoid race in string printing
` [PATCH] audit: copy comm "

audit 2.3.5 released
 2014-03-17 22:28 UTC 

[PATCH 0/7][RFC] pid: changes to support audit
 2014-03-17 20:15 UTC  (5+ messages)
` [PATCH] pid: change task_struct::pid to read-only
  ` [PATCH 7/7] pid: get pid_t ppid of task in init_pid_ns

[PATCH v3 0/2] arm64: prerequisites for audit and ftrace
 2014-03-16 19:48 UTC  (15+ messages)
` [PATCH v4 0/3] "
  ` [PATCH v4 1/3] arm64: make a single hook to syscall_trace() for all syscall features
  ` [PATCH v4 2/3] arm64: split syscall_trace() into separate functions for enter/exit
  ` [PATCH v4 3/3] arm64: Add regs_return_value() in syscall.h
  ` [PATCH v5 0/4] arm64: prerequisites for audit and ftrace
    ` [PATCH v5 1/4] arm64: make a single hook to syscall_trace() for all syscall features
    ` [PATCH v5 2/4] arm64: split syscall_trace() into separate functions for enter/exit
    ` [PATCH v5 3/4] arm64: Add regs_return_value() in syscall.h
    ` [PATCH v5 4/4] arm64: is_compat_task is defined both in asm/compat.h and linux/compat.h

[PATCH v4 0/1] audit: generic compat system call support
 2014-03-16 19:13 UTC  (4+ messages)
` [PATCH_v5] "
  ` [PATCH_v5] audit: Add generic compat syscall support

[PATCH] audit: Use struct net not pid_t to remember the network namespce to reply in
 2014-03-16 19:13 UTC  (28+ messages)
    ` [PATCH] audit: Send replies in the proper network namespace
      ` [RFC][PATCH] audit: Simplify by assuming the callers socket buffer is large enough
                ` [GIT PULL] namespaces fixes for 3.14-rcX

[PATCH v5 0/3] arm64: Add audit support
 2014-03-15  5:49 UTC  (16+ messages)
` [PATCH v6 0/2] "
  ` [PATCH v6 1/2] "
  ` [PATCH v6 2/2] arm64: audit: Add audit hook in ptrace/syscall_trace
  ` [PATCH v7 0/2] arm64: Add audit support
    ` [PATCH v7 1/2] "
    ` [PATCH v7 2/2] arm64: audit: Add audit hook in syscall_trace_enter/exit()
    ` [PATCH_v8 0/2] arm64: Add audit support
      ` [PATCH_v8 1/2] "
      ` [PATCH_v8 2/2] arm64: audit: Add audit hook in syscall_trace_enter/exit()

scary syslog message (from audit ?)
 2014-03-13  2:14 UTC  (2+ messages)

Is zero a valid value for the pid member of the AUDIT_SIGNAL_INFO message?
 2014-03-12 18:27 UTC  (12+ messages)

[PATCH 0/5] audit: add restricted capability read-only netlink multicast socket
 2014-03-12 15:25 UTC  (6+ messages)
` [PATCH 4/5] audit: add netlink multicast group for log read

[PATCH 0/2] kernel AUDIT_LOGIN event is missing subject label
 2014-03-11 19:58 UTC  (3+ messages)
` [PATCH 1/2] audit: remove superfluous new- prefix in AUDIT_LOGIN messages
` [PATCH 2/2] audit: include subject in login records

audit_status in kernel
 2014-03-10 23:14 UTC  (3+ messages)

[PATCH 0/6][RFC] audit: standardize and simplify syscall_get_arch()
 2014-03-06 19:55 UTC  (10+ messages)
` [PATCH 1/6][RFC] syscall: define syscall_get_arch() for each audit-supported arch
` [PATCH 2/6][RFC] audit: add arch field to seccomp event log
` [PATCH 3/6][RFC] audit: __audit_syscall_entry: ignore arch arg and call syscall_get_arch() directly
` [PATCH 4/6][RFC] audit: drop arch from audit_syscall_entry() interface
` [PATCH 5/6][RFC] audit: drop args from syscall_get_arch() interface
` [PATCH 6/6][RFC] audit: drop arch from __audit_syscall_entry() interface

Audit proctitle/cmdline patches
 2014-03-05 14:24 UTC 

[PATCH] audit: don't generate loginuid log when audit disabled
 2014-03-03 22:51 UTC  (3+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).