messages from 2018-02-16 06:00:33 to 2018-03-29 13:03:27 UTC [more...]
[RFC PATCH ghak32 V2 00/13] audit: implement container id
2018-03-29 13:03 UTC (17+ messages)
` [RFC PATCH ghak32 V2 01/13] audit: add "
` [RFC PATCH ghak32 V2 03/13] audit: log container info of syscalls
` [RFC PATCH ghak32 V2 04/13] audit: add containerid filtering
` [RFC PATCH ghak32 V2 06/13] audit: add support for non-syscall auxiliary records
` [RFC PATCH ghak32 V2 02/13] audit: check children and threading before allowing containerid
` [RFC PATCH ghak32 V2 05/13] audit: add containerid support for ptrace and signals
` [RFC PATCH ghak32 V2 07/13] audit: add container aux record to watch/tree/mark
` [RFC PATCH ghak32 V2 10/13] audit: add containerid support for seccomp and anom_abend records
` [RFC PATCH ghak32 V2 08/13] audit: add containerid support for tty_audit
` [RFC PATCH ghak32 V2 09/13] audit: add containerid support for config/feature/user records
` [RFC PATCH ghak32 V2 11/13] audit: add support for containerid to network namespaces
` [RFC PATCH ghak32 V2 12/13] audit: NETFILTER_PKT: record each container ID associated with a netNS
` [RFC PATCH ghak32 V2 13/13] debug audit: read container ID of a process
CONFIG_CHANGE record formats
2018-03-23 21:48 UTC (3+ messages)
What does audisp/plugins.d/syslog.conf LOG_WARN not show?
2018-03-22 19:08 UTC
[trivial PATCH V2] treewide: Align function definition open/close braces
2018-03-22 13:37 UTC (5+ messages)
[PATCH ghak21 V4 0/2] audit: address ANOM_LINK excess records
2018-03-21 15:49 UTC (5+ messages)
` [PATCH ghak21 V4 1/2] audit: remove path param from link denied function
` [PATCH ghak21 V4 2/2] audit: add refused symlink to audit_names
empty checkpoint file
2018-03-21 9:56 UTC (2+ messages)
[PATCH ghak21 V3 0/2] audit: address ANOM_LINK excess records
2018-03-21 8:47 UTC (6+ messages)
` [PATCH ghak21 V3 1/2] audit: remove path param from link denied function
` [PATCH ghak21 V3 2/2] audit: add refused symlink to audit_names
[PATCH] audit: set TIF_AUDIT_SYSCALL only if audit filter has been populated
2018-03-19 17:15 UTC (11+ messages)
[PATCH ghau40 v2 0/5] add support for audit container ID
2018-03-16 9:12 UTC (6+ messages)
` [PATCH ghau40 v2 1/5] AUDIT_CONTAINER message type basic support
` [PATCH ghau40 v2 2/5] AUDIT_CONTAINER_INFO "
` [PATCH ghau40 v2 3/5] auditctl: add support for containerid filter
` [PATCH ghau40 v2 4/5] add ausearch containerid support
` [PATCH ghau40 v2 5/5] start normalization "
[RFC PATCH V1 00/12] audit: implement container id
2018-03-16 3:58 UTC (27+ messages)
` [RFC PATCH V1 01/12] audit: add "
` [RFC PATCH V1 02/12] audit: log container info of syscalls
` [RFC PATCH V1 03/12] audit: add containerid filtering
` [RFC PATCH V1 04/12] audit: read container ID of a process
` [RFC PATCH V1 09/12] audit: add containerid support for config/feature/user records
` [RFC PATCH V1 05/12] audit: add containerid support for ptrace and signals
` [RFC PATCH V1 06/12] audit: add support for non-syscall auxiliary records
` [RFC PATCH V1 07/12] audit: add container aux record to watch/tree/mark
` [RFC PATCH V1 08/12] audit: add containerid support for tty_audit
` [RFC PATCH V1 10/12] audit: add containerid support for seccomp and anom_abend records
` [RFC PATCH V1 11/12] debug audit: add container id
` [RFC PATCH V1 12/12] debug! "
Matching close() system calls
2018-03-15 17:34 UTC (2+ messages)
[PATCH ghak21 V2 0/4] audit: address ANOM_LINK excess records
2018-03-14 5:23 UTC (27+ messages)
` [PATCH ghak21 V2 1/4] audit: make ANOM_LINK obey audit_enabled and audit_dummy_context
` [PATCH ghak21 V2 2/4] audit: link denied should not directly generate PATH record
` [PATCH ghak21 V2 3/4] audit: add refused symlink to audit_names
` [PATCH ghak21 V2 4/4] audit: add parent of "
[PATCH] audit: add containerid support for IMA-audit
2018-03-13 5:53 UTC (6+ messages)
audit events w/o audit rules?
2018-03-13 4:30 UTC (4+ messages)
[RFC PATCH ghak21 0/4] audit: address ANOM_LINK excess records
2018-03-12 15:47 UTC (23+ messages)
` [RFC PATCH ghak21 1/4] audit: make ANOM_LINK obey audit_enabled and audit_dummy_context
` [RFC PATCH ghak21 2/4] audit: link denied should not directly generate PATH record
` [RFC PATCH ghak21 3/4] audit: add refused symlink to audit_names
` [RFC PATCH ghak21 4/4] audit: add parent of "
Audit roadmap and new development
2018-03-11 20:15 UTC (5+ messages)
audit 2.8.3 released
2018-03-10 12:38 UTC
audit watch rules and docker containers
2018-03-07 8:57 UTC (4+ messages)
[PATCH] audit: do not panic kernel on invalid audit parameter
2018-03-07 4:13 UTC (15+ messages)
` [PATCH v2] "
` [PATCH] audit: do not panic on invalid boot parameter
[RFC PATCH] auditctl: add support for containerid filter
2018-03-05 8:06 UTC
[PATCH 0/2] audit boot parameter cleanups
2018-03-02 22:30 UTC (16+ messages)
` [PATCH 1/2] audit: move processing of "audit" boot param to audit_init()
` [PATCH 2/2] audit: add "on"/"off" as valid boot parameter values
[PATCH] libaudit: fix manpage listing incorrect function under NAME
2018-02-27 14:09 UTC (2+ messages)
[PATCH] audit: track the owner of the command mutex ourselves
2018-02-23 16:28 UTC (3+ messages)
[PATCH] audit: return on memory error to avoid null pointer dereference
2018-02-22 0:55 UTC (5+ messages)
[PATCH 4.10 070/111] audit: fix auditd/kernel connection state tracking
2018-02-21 23:04 UTC (8+ messages)
[PATCH] audit: return on memory error to avoid null pointer dereference
2018-02-21 6:52 UTC (2+ messages)
[PATCH ghak8 ALT4 V4 0/3] audit: show more information for entries with anonymous parents
2018-02-16 18:29 UTC (9+ messages)
` [PATCH ghak8 ALT4 V4 1/3] audit: show partial pathname "
[PATCH V2] audit: remove arch_f pointer from struct audit_krule
2018-02-16 11:42 UTC
[RFC PATCH 0/3] simplify struct audit_krule reveals bug
2018-02-16 11:17 UTC (4+ messages)
` [RFC PATCH 1/3] audit: remove arch_f pointer from struct audit_krule
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).