linux-audit.redhat.com archive mirror
 help / color / mirror / Atom feed
 messages from 2018-03-11 09:37:43 to 2018-04-24 02:02:00 UTC [more...]

[RFC PATCH ghak32 V2 00/13] audit: implement container id
 2018-04-24  2:02 UTC  (50+ messages)
` [RFC PATCH ghak32 V2 01/13] audit: add "
  ` [RFC PATCH ghak32 V2 02/13] audit: check children and threading before allowing containerid
  ` [RFC PATCH ghak32 V2 05/13] audit: add containerid support for ptrace and signals
  ` [RFC PATCH ghak32 V2 07/13] audit: add container aux record to watch/tree/mark
  ` [RFC PATCH ghak32 V2 10/13] audit: add containerid support for seccomp and anom_abend records
` [RFC PATCH ghak32 V2 03/13] audit: log container info of syscalls
` [RFC PATCH ghak32 V2 04/13] audit: add containerid filtering
` [RFC PATCH ghak32 V2 06/13] audit: add support for non-syscall auxiliary records
` [RFC PATCH ghak32 V2 08/13] audit: add containerid support for tty_audit
` [RFC PATCH ghak32 V2 09/13] audit: add containerid support for config/feature/user records
` [RFC PATCH ghak32 V2 11/13] audit: add support for containerid to network namespaces
` [RFC PATCH ghak32 V2 12/13] audit: NETFILTER_PKT: record each container ID associated with a netNS
` [RFC PATCH ghak32 V2 13/13] debug audit: read container ID of a process

Monitoring files
 2018-04-24  1:19 UTC 

filename not audited for openat() on F28
 2018-04-23 22:12 UTC  (5+ messages)

[PATCH ghak80 V1] audit: add syscall information to FEATURE_CHANGE records
 2018-04-20 19:04 UTC  (8+ messages)

auditing automounted filesystems (NFS)
 2018-04-19 13:40 UTC  (8+ messages)

test-queue fails on s390x Alpine Linux
 2018-04-19 13:24 UTC  (2+ messages)

[RFC PATCH V1 00/12] audit: implement container id
 2018-04-18 19:51 UTC  (8+ messages)
` [RFC PATCH V1 01/12] audit: add "

Limiting SECCOMP audit events
 2018-04-18  1:57 UTC  (5+ messages)

[PATCH ghak46 V1] audit: normalize MAC_STATUS record
 2018-04-18  1:51 UTC  (9+ messages)

[PATCH ghak47 V1] audit: normalize MAC_POLICY_LOAD record
 2018-04-17 21:55 UTC  (3+ messages)

Audit next branch rebased to v4.17-rc1
 2018-04-16 22:12 UTC 

[PATCH ghak21 V4 0/2] audit: address ANOM_LINK excess records
 2018-04-16 17:55 UTC  (7+ messages)
` [PATCH ghak21 V4 1/2] audit: remove path param from link denied function
` [PATCH ghak21 V4 2/2] audit: add refused symlink to audit_names

unlimit retries for remote plugin restart
 2018-04-12 14:32 UTC  (2+ messages)

[ANNOUNCE] Linux Security Summit North America 2018 - CFP
 2018-04-09 23:14 UTC 

Can auditd run in lxc on centos7
 2018-04-09 20:59 UTC  (7+ messages)

[PATCH v2] audit: allow not equal op for audit by executable
 2018-04-09 19:22 UTC  (3+ messages)

[PATCH] audit: allow not equal op for audit by executable
 2018-04-06 21:21 UTC  (10+ messages)

[GIT PULL] Audit patches for v4.17
 2018-04-03 21:15 UTC 

CONFIG_CHANGE record formats
 2018-03-30 17:20 UTC  (7+ messages)

What does audisp/plugins.d/syslog.conf LOG_WARN not show?
 2018-03-22 19:08 UTC 

[trivial PATCH V2] treewide: Align function definition open/close braces
 2018-03-22 13:37 UTC  (5+ messages)

empty checkpoint file
 2018-03-21  9:56 UTC  (2+ messages)

[PATCH ghak21 V3 0/2] audit: address ANOM_LINK excess records
 2018-03-21  8:47 UTC  (6+ messages)
` [PATCH ghak21 V3 1/2] audit: remove path param from link denied function
` [PATCH ghak21 V3 2/2] audit: add refused symlink to audit_names

[PATCH] audit: set TIF_AUDIT_SYSCALL only if audit filter has been populated
 2018-03-19 17:15 UTC  (7+ messages)

[PATCH ghau40 v2 0/5] add support for audit container ID
 2018-03-16  9:12 UTC  (6+ messages)
  ` [PATCH ghau40 v2 1/5] AUDIT_CONTAINER message type basic support
` [PATCH ghau40 v2 2/5] AUDIT_CONTAINER_INFO "
` [PATCH ghau40 v2 3/5] auditctl: add support for containerid filter
` [PATCH ghau40 v2 4/5] add ausearch containerid support
` [PATCH ghau40 v2 5/5] start normalization "

Matching close() system calls
 2018-03-15 17:34 UTC  (2+ messages)

[PATCH ghak21 V2 0/4] audit: address ANOM_LINK excess records
 2018-03-14  5:23 UTC  (27+ messages)
` [PATCH ghak21 V2 1/4] audit: make ANOM_LINK obey audit_enabled and audit_dummy_context
` [PATCH ghak21 V2 2/4] audit: link denied should not directly generate PATH record
` [PATCH ghak21 V2 3/4] audit: add refused symlink to audit_names
` [PATCH ghak21 V2 4/4] audit: add parent of "

[PATCH] audit: add containerid support for IMA-audit
 2018-03-13  5:53 UTC  (6+ messages)

audit events w/o audit rules?
 2018-03-13  4:30 UTC  (4+ messages)

[RFC PATCH ghak21 0/4] audit: address ANOM_LINK excess records
 2018-03-12 15:47 UTC  (8+ messages)
` [RFC PATCH ghak21 2/4] audit: link denied should not directly generate PATH record
` [RFC PATCH ghak21 4/4] audit: add parent of refused symlink to audit_names

Audit roadmap and new development
 2018-03-11 20:15 UTC  (5+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).