linux-audit.redhat.com archive mirror
 help / color / mirror / Atom feed
 messages from 2018-03-01 19:41:14 to 2018-04-18 23:47:44 UTC [more...]

[RFC PATCH ghak32 V2 00/13] audit: implement container id
 2018-04-18 23:47 UTC  (19+ messages)
` [RFC PATCH ghak32 V2 01/13] audit: add "
` [RFC PATCH ghak32 V2 03/13] audit: log container info of syscalls
` [RFC PATCH ghak32 V2 04/13] audit: add containerid filtering
` [RFC PATCH ghak32 V2 06/13] audit: add support for non-syscall auxiliary records
  ` [RFC PATCH ghak32 V2 02/13] audit: check children and threading before allowing containerid
  ` [RFC PATCH ghak32 V2 05/13] audit: add containerid support for ptrace and signals
  ` [RFC PATCH ghak32 V2 07/13] audit: add container aux record to watch/tree/mark
  ` [RFC PATCH ghak32 V2 10/13] audit: add containerid support for seccomp and anom_abend records
` [RFC PATCH ghak32 V2 08/13] audit: add containerid support for tty_audit
` [RFC PATCH ghak32 V2 09/13] audit: add containerid support for config/feature/user records
` [RFC PATCH ghak32 V2 11/13] audit: add support for containerid to network namespaces
` [RFC PATCH ghak32 V2 12/13] audit: NETFILTER_PKT: record each container ID associated with a netNS
` [RFC PATCH ghak32 V2 13/13] debug audit: read container ID of a process

[RFC PATCH V1 00/12] audit: implement container id
 2018-04-18 19:51 UTC  (22+ messages)
` [RFC PATCH V1 01/12] audit: add "
` [RFC PATCH V1 11/12] debug "
` [RFC PATCH V1 12/12] debug! "

[PATCH ghak80 V1] audit: add syscall information to FEATURE_CHANGE records
 2018-04-18  2:01 UTC  (4+ messages)

Limiting SECCOMP audit events
 2018-04-18  1:57 UTC  (5+ messages)

[PATCH ghak46 V1] audit: normalize MAC_STATUS record
 2018-04-18  1:51 UTC  (9+ messages)

[PATCH ghak47 V1] audit: normalize MAC_POLICY_LOAD record
 2018-04-17 21:55 UTC  (3+ messages)

Audit next branch rebased to v4.17-rc1
 2018-04-16 22:12 UTC 

[PATCH ghak21 V4 0/2] audit: address ANOM_LINK excess records
 2018-04-16 17:55 UTC  (7+ messages)
` [PATCH ghak21 V4 1/2] audit: remove path param from link denied function
` [PATCH ghak21 V4 2/2] audit: add refused symlink to audit_names

unlimit retries for remote plugin restart
 2018-04-12 14:32 UTC  (2+ messages)

[ANNOUNCE] Linux Security Summit North America 2018 - CFP
 2018-04-09 23:14 UTC 

Can auditd run in lxc on centos7
 2018-04-09 20:59 UTC  (7+ messages)

[PATCH v2] audit: allow not equal op for audit by executable
 2018-04-09 19:22 UTC  (3+ messages)

auditing automounted filesystems (NFS)
 2018-04-09 17:45 UTC  (6+ messages)

[PATCH] audit: allow not equal op for audit by executable
 2018-04-06 21:21 UTC  (10+ messages)

[GIT PULL] Audit patches for v4.17
 2018-04-03 21:15 UTC 

CONFIG_CHANGE record formats
 2018-03-30 17:20 UTC  (7+ messages)

What does audisp/plugins.d/syslog.conf LOG_WARN not show?
 2018-03-22 19:08 UTC 

[trivial PATCH V2] treewide: Align function definition open/close braces
 2018-03-22 13:37 UTC  (5+ messages)

empty checkpoint file
 2018-03-21  9:56 UTC  (2+ messages)

[PATCH ghak21 V3 0/2] audit: address ANOM_LINK excess records
 2018-03-21  8:47 UTC  (6+ messages)
` [PATCH ghak21 V3 1/2] audit: remove path param from link denied function
` [PATCH ghak21 V3 2/2] audit: add refused symlink to audit_names

[PATCH] audit: set TIF_AUDIT_SYSCALL only if audit filter has been populated
 2018-03-19 17:15 UTC  (11+ messages)

[PATCH ghau40 v2 0/5] add support for audit container ID
 2018-03-16  9:12 UTC  (6+ messages)
  ` [PATCH ghau40 v2 1/5] AUDIT_CONTAINER message type basic support
` [PATCH ghau40 v2 2/5] AUDIT_CONTAINER_INFO "
` [PATCH ghau40 v2 3/5] auditctl: add support for containerid filter
` [PATCH ghau40 v2 4/5] add ausearch containerid support
` [PATCH ghau40 v2 5/5] start normalization "

Matching close() system calls
 2018-03-15 17:34 UTC  (2+ messages)

[PATCH ghak21 V2 0/4] audit: address ANOM_LINK excess records
 2018-03-14  5:23 UTC  (27+ messages)
` [PATCH ghak21 V2 1/4] audit: make ANOM_LINK obey audit_enabled and audit_dummy_context
` [PATCH ghak21 V2 2/4] audit: link denied should not directly generate PATH record
` [PATCH ghak21 V2 3/4] audit: add refused symlink to audit_names
` [PATCH ghak21 V2 4/4] audit: add parent of "

[PATCH] audit: add containerid support for IMA-audit
 2018-03-13  5:53 UTC  (6+ messages)

audit events w/o audit rules?
 2018-03-13  4:30 UTC  (4+ messages)

[RFC PATCH ghak21 0/4] audit: address ANOM_LINK excess records
 2018-03-12 15:47 UTC  (20+ messages)
` [RFC PATCH ghak21 1/4] audit: make ANOM_LINK obey audit_enabled and audit_dummy_context
` [RFC PATCH ghak21 2/4] audit: link denied should not directly generate PATH record
` [RFC PATCH ghak21 3/4] audit: add refused symlink to audit_names
` [RFC PATCH ghak21 4/4] audit: add parent of "

Audit roadmap and new development
 2018-03-11 20:15 UTC  (5+ messages)

audit 2.8.3 released
 2018-03-10 12:38 UTC 

audit watch rules and docker containers
 2018-03-07  8:57 UTC  (4+ messages)

[PATCH] audit: do not panic kernel on invalid audit parameter
 2018-03-07  4:13 UTC  (6+ messages)
` [PATCH] audit: do not panic on invalid boot parameter

[RFC PATCH] auditctl: add support for containerid filter
 2018-03-05  8:06 UTC 

[PATCH 0/2] audit boot parameter cleanups
 2018-03-02 22:30 UTC  (9+ messages)
` [PATCH 1/2] audit: move processing of "audit" boot param to audit_init()


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).