linux-audit.redhat.com archive mirror
 help / color / mirror / Atom feed
 messages from 2015-10-01 22:32:05 to 2015-11-20 17:51:58 UTC [more...]

seccomp and audit_enabled
 2015-11-20 17:51 UTC  (13+ messages)

filtering system calls with auid -1
 2015-11-19 21:41 UTC  (5+ messages)

[PATCH] kernel-audit: Delete unnecessary checks before two function calls
 2015-11-19 20:53 UTC  (2+ messages)

[PATCH 00/15] Rework tty audit
 2015-11-16 13:25 UTC  (23+ messages)
` [PATCH 01/15] tty: audit: Early-out pty master reads earlier
` [PATCH 02/15] tty: audit: Never audit packet mode
` [PATCH 03/15] tty: audit: Remove icanon mode from call chain
` [PATCH 04/15] tty: audit: Defer audit buffer association
` [PATCH 05/15] tty: audit: Take siglock directly
` [PATCH 06/15] tty: audit: Ignore current association for audit push
` [PATCH 07/15] tty: audit: Combine push functions
` [PATCH 08/15] tty: audit: Track tty association with dev_t
` [PATCH 09/15] tty: audit: Handle tty audit enable atomically
` [PATCH 10/15] tty: audit: Remove false memory optimization
` [PATCH 11/15] tty: audit: Remove tty_audit_buf reference counting
` [PATCH 12/15] tty: audit: Simplify first-use allocation
` [PATCH 13/15] tty: audit: Check audit enable first
` [PATCH 14/15] tty: audit: Always push audit buffer before TIOCSTI
` [PATCH 15/15] tty: audit: Poison tty_audit_buf while process exits

audit log still getting rotated even with max_log_file_action = ignore?
 2015-11-08  6:05 UTC  (5+ messages)

SELinux policy reload cannot be sent to audit system
 2015-11-06  1:25 UTC  (14+ messages)

[RFC PATCH 0/7] audit: clean up audit queue handling
 2015-11-06  1:23 UTC  (22+ messages)
` [RFC PATCH 1/7] audit: don't needlessly reset valid wait time
` [RFC PATCH 2/7] audit: include auditd's threads in audit_log_start() wait exception
` [RFC PATCH 3/7] audit: allow systemd to use queue reserves
` [RFC PATCH 4/7] audit: wake up threads if queue switched from limited to unlimited
` [RFC PATCH 5/7] audit: allow audit_cmd_mutex holders to use reserves
` [RFC PATCH 6/7] audit: wake up audit_backlog_wait queue when auditd goes away
` [RFC PATCH 7/7] audit: wake up kauditd_thread after auditd registers

[RFC PATCH] audit: remove audit_backlog_wait_overflow
 2015-11-04 23:04 UTC 

[GIT PULL] Audit patches for 4.4
 2015-11-04 13:38 UTC  (2+ messages)

Audit Framework and namespaces
 2015-11-03 19:44 UTC  (3+ messages)

[RFC PATCH v3 0/5] kdbus LSM/SELinux hooks
 2015-10-29 20:38 UTC  (21+ messages)
` [RFC PATCH v3 1/5] kdbus: add creator credentials to the endpoints
` [RFC PATCH v3 2/5] lsm: introduce hooks for kdbus
` [RFC PATCH v3 3/5] lsm: add support for auditing kdbus service names
` [RFC PATCH v3 4/5] selinux: introduce kdbus names into the policy
` [RFC PATCH v3 5/5] selinux: introduce kdbus access controls

[PATCH] audit: removing unused variable
 2015-10-29 14:06 UTC  (4+ messages)

[PATCH v3] audit: removing unused variable
 2015-10-29  4:37 UTC 

[PATCH v2] audit: removing unused variable
 2015-10-29  4:32 UTC  (2+ messages)

[PATCH] audit: make audit_log_common_recv_msg() a void function
 2015-10-28 20:41 UTC 

[PATCH 2/2] Fixed Trivial Warnings in file: Deleted Spaces prior to tabs, and added lines. modified: kernel/auditfilter.c
 2015-10-27 19:54 UTC  (15+ messages)

Running auditd from Raspberry Pi (Raspbian)
 2015-10-27  3:12 UTC  (8+ messages)

[PATCH] Fix to:WARNING: please, no space before tabs modified: kernel/auditfilter.c
 2015-10-26 23:02 UTC  (2+ messages)

Should audit_seccomp check audit_enabled?
 2015-10-24  2:24 UTC  (11+ messages)

BSides Portland - The Linux Audit Framework
 2015-10-22 20:34 UTC  (2+ messages)

[ARCHIVE DEBUG 00/13] audit_debug: diagnostics for audit internal workings
 2015-10-22 19:47 UTC  (18+ messages)
` [ARCHIVE DEBUG 01/13] audit_debug: set reserve to same size as backlog
` [ARCHIVE DEBUG 02/13] audit_debug: squawk when digging into reserve
` [ARCHIVE DEBUG 03/13] audit_debug: proc instrumentation
` [ARCHIVE DEBUG 04/13] audit_debug: add /proc counters for overflows, waiters, recovers, reserves
` [ARCHIVE DEBUG 05/13] audit_debug: proc debug output easier to paste
` [ARCHIVE DEBUG 06/13] audit_debug: don't let systemd change config
` [ARCHIVE DEBUG 07/13] audit_debug: instrument audit_cmd_mutex contention
` [ARCHIVE DEBUG 08/13] audit_debug: seperate out audit_titles in proc display
` [ARCHIVE DEBUG 09/13] netlink_debug: instrument timing of calls by init/systemd or audit_pid
` [ARCHIVE DEBUG 10/13] audit_debug: bark on impossible reserve process conditions in while loop
` [ARCHIVE DEBUG 11/13] audit_debug: instrument audit_receive timing
` [ARCHIVE DEBUG 12/13] audit_debug: list processes and frequencies waiting for auditd
` [ARCHIVE DEBUG 13/13] audit_debug: print inode nr for each path when listing exe rules

how costly is flush = sync vs incremental?
 2015-10-19 18:57 UTC 

[PATHC] Use more rpm macros in audit.spec
 2015-10-16 14:12 UTC 

where can I find documentation on audit log formats?
 2015-10-14  0:49 UTC  (2+ messages)

Audit record created by echo "ThisIsATest" >>/tmp/test/file11
 2015-10-09 15:02 UTC  (2+ messages)

monitoring deletion of directories?
 2015-10-08 21:30 UTC  (2+ messages)

[RFC PATCH v2 0/5] kdbus LSM/SELinux hooks
 2015-10-06 22:20 UTC  (8+ messages)
` [RFC PATCH v2 1/5] kdbus: add creator credentials to the endpoints
` [RFC PATCH v2 2/5] lsm: introduce hooks for kdbus
` [RFC PATCH v2 3/5] lsm: add support for auditing kdbus service names
` [RFC PATCH v2 4/5] selinux: introduce kdbus names into the policy
` [RFC PATCH v2 5/5] selinux: introduce kdbus access controls

linux-next: manual merge of the audit tree with Linus' tree
 2015-10-06 17:21 UTC 

auditd.conf: flush set to DATA or SYNC does nothing on many kernels?
 2015-10-06 16:49 UTC  (4+ messages)

Two small errors in ausearch-parse.c
 2015-10-06 15:47 UTC  (2+ messages)

[PATCH] audit: constify parts of common_audit_data and lsm_network_audit
 2015-10-05 13:17 UTC 

auditing kdbus service names
 2015-10-01 22:32 UTC  (4+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).