public inbox for linux-audit@redhat.com
 help / color / mirror / Atom feed
 messages from 2018-05-29 22:58:06 to 2018-06-25 21:16:46 UTC [more...]

auditctl for admin's accessing other user files
 2018-06-25 21:16 UTC  (2+ messages)

[PATCH -next v2] cred: conditionally declare groups-related functions
 2018-06-25 21:04 UTC  (3+ messages)

[PATCH] kernel: audit_tree: Fix a sleep-in-atomic-context bug
 2018-06-25 12:55 UTC  (6+ messages)

[PATCH] audit: use ktime_get_coarse_ts64() for time access
 2018-06-22 20:24 UTC  (2+ messages)

linux-next: Tree for Jun 20 (kernel/auditsc.c)
 2018-06-22 19:19 UTC  (8+ messages)
    ` [PATCH -next] cred: conditionally declare groups-related functions

[RFC PATCH ghak10 1/3] audit: Add AUDIT_TIME_ADJUSTED record type
 2018-06-21 11:28 UTC  (13+ messages)
` [RFC PATCH ghak10 2/3] audit: Add the audit_adjtime() function
` [RFC PATCH ghak10 3/3] ntp: Audit valid attempts to adjust the clock

unlimit retries for remote plugin restart
 2018-06-20 17:55 UTC  (2+ messages)

audit 2.8.4 released
 2018-06-19 19:38 UTC 

[RFC PATCH ghak86 V1] audit: eliminate audit_enabled magic number comparison
 2018-06-19 15:10 UTC  (4+ messages)

[RFC PATCH ghak10 v2 0/5] audit: Log modifying adjtimex(2) calls
 2018-06-19 15:02 UTC  (6+ messages)
` [RFC PATCH ghak10 v2 1/4] audit: Add AUDIT_TIME_ADJUSTED record type
` [RFC PATCH ghak10 v2 2/4] audit: Add the audit_adjtime() function
` [RFC PATCH ghak10 v2 3/4] timekeeping: Audit attempts to adjust the clock
` [RFC PATCH ghak10 v2 4/4] [OPTIONAL] Determine read-only in the validation function

[PATCH ghak89 V3] audit: rename FILTER_TYPE to FILTER_EXCLUDE
 2018-06-19 14:42 UTC  (3+ messages)

[PATCH ghak82 v3] audit: Fix extended comparison of GID/EGID
 2018-06-19 14:37 UTC  (3+ messages)

[RFC PATCH ghak88 V1] audit: tie ANOM_ABEND records to syscall
 2018-06-19 14:31 UTC  (3+ messages)

[RFC PATCH ghak87 V1] audit: tie SECCOMP records to syscall
 2018-06-19 14:29 UTC  (3+ messages)

[RFC PATCH 0/2] Extend AUDIT_EXE and AUDIT_DIR to more filter types
 2018-06-19 14:25 UTC  (15+ messages)
` [RFC PATCH 1/2] audit: allow other filter list types for AUDIT_EXE
` [RFC PATCH 2/2] [WIP] audit: allow other filter list types for AUDIT_DIR

audit/next rebased to v4.18-rc1
 2018-06-18 21:05 UTC 

Hung processes stuck in D state after starting a second audit consumer
 2018-06-18 19:52 UTC  (3+ messages)

[PATCH v2] audit: fix use-after-free in audit_add_watch
 2018-06-18 19:15 UTC  (2+ messages)

[PATCH] audit: fix use-after-free in audit_add_watch
 2018-06-18 18:54 UTC  (3+ messages)

[PATCH ghak59 V1 0/2] tree and watch rule log cleanups
 2018-06-14 21:01 UTC  (4+ messages)
` [PATCH ghak59 V1 1/2] audit: tree: check audit_enabled
` [PATCH ghak59 V1 2/2] audit: watch: simplify audit_enabled check

audit trim and audit make_equiv
 2018-06-14 20:31 UTC 

[RFC PATCH ghak59 V1 0/6] audit: config_change normalizations and event record gathering
 2018-06-14 20:21 UTC  (7+ messages)
` [RFC PATCH ghak59 V1 1/6] audit: give a clue what CONFIG_CHANGE op was involved
` [RFC PATCH ghak59 V1 2/6] audit: add syscall information to CONFIG_CHANGE records
` [RFC PATCH ghak59 V1 3/6] audit: exclude user records from syscall context
` [RFC PATCH ghak59 V1 4/6] audit: hand taken context to audit_kill_trees for syscall logging
` [RFC PATCH ghak59 V1 5/6] audit: move EOE record after kill_trees for exit/free
` [RFC PATCH ghak59 V1 6/6] audit: extend config_change mark/watch/tree rule changes

auditd rule error
 2018-06-11 14:49 UTC  (3+ messages)

Audit rules for PCI : time change
 2018-06-08  9:47 UTC 

[PATCH] audit-testsuite: add nmap-ncat/netcat as a dependency
 2018-06-07 18:54 UTC  (3+ messages)

[RFC PATCH ghak90 (was ghak32) V3 00/10] audit: implement container identifier
 2018-06-07 14:20 UTC  (16+ messages)
` [RFC PATCH ghak90 (was ghak32) V3 01/10] audit: add container id
` [RFC PATCH ghak90 (was ghak32) V3 02/10] audit: log container info of syscalls
` [RFC PATCH ghak90 (was ghak32) V3 03/10] audit: add containerid support for ptrace and signals
` [RFC PATCH ghak90 (was ghak32) V3 04/10] audit: add support for non-syscall auxiliary records
` [RFC PATCH ghak90 (was ghak32) V3 05/10] audit: add containerid support for tty_audit
` [RFC PATCH ghak90 (was ghak32) V3 06/10] audit: add containerid filtering
` [RFC PATCH ghak90 (was ghak32) V3 07/10] audit: add support for containerid to network namespaces
` [RFC PATCH ghak90 (was ghak32) V3 08/10] audit: NETFILTER_PKT: record each container ID associated with a netNS
` [RFC PATCH ghak90 (was ghak32) V3 09/10] debug audit: read container ID of a process
` [RFC PATCH ghak90 (was ghak32) V3 10/10] rfkill: fix spelling mistake contidion to condition

Missing "nametype" field in audit PATH records
 2018-06-06 18:26 UTC  (2+ messages)

[PATCH ghau51/ghau40 v3 0/6] add support for audit container identifier
 2018-06-06 17:07 UTC  (7+ messages)
` [PATCH ghau51/ghau40 v3 1/6] AUDIT_CONTAINER_ID message type basic support
` [PATCH ghau51/ghau40 v3 2/6] AUDIT_CONTAINER "
` [PATCH ghau51/ghau40 v3 3/6] auditctl: add support for AUDIT_CONTID filter
` [PATCH ghau51/ghau40 v3 4/6] add ausearch containerid support
` [PATCH ghau51/ghau40 v3 5/6] start normalization "
` [PATCH ghau51/ghau40 v3 6/6] libaudit: add support to get the task audit container identifier

[PATCH v3 0/4] IMA: work on audit records produced by IMA
 2018-06-06 14:52 UTC  (10+ messages)
` [PATCH v3 1/4] ima: Call audit_log_string() rather than logging it untrusted
` [PATCH v3 2/4] ima: Use audit_log_format() rather than audit_log_string()
` [PATCH v3 3/4] ima: Do not audit if CONFIG_INTEGRITY_AUDIT is not set
` [PATCH v3 4/4] ima: Differentiate auditing policy rules from "audit" actions

[GIT PULL] Audit patches for v4.18
 2018-06-06  0:48 UTC 

[RFC PATCH ghak86 V1] audit: use audit_enabled as a boolean where convenient
 2018-06-04 23:57 UTC  (6+ messages)

Auditd syslog plugin
 2018-06-04 23:32 UTC  (3+ messages)

[PATCH ghak89 V2] audit: rename FILTER_TYPE to FILTER_EXCLUDE
 2018-06-04 22:31 UTC  (2+ messages)

[RFC PATCH ghak32 V2 00/13] audit: implement container id
 2018-06-04 20:30 UTC  (9+ messages)
` [RFC PATCH ghak32 V2 01/13] audit: add "

[PATCH ghak82 v2] audit: Fix extended comparison of GID/EGID
 2018-06-04 20:21 UTC  (3+ messages)

[PATCH 0/8] IMA: work on audit records produced by IMA
 2018-06-01 20:50 UTC  (41+ messages)
` [PATCH 3/8] audit: Implement audit_log_tty()
` [PATCH 5/8] integrity: Add exe= and tty= before res= to integrity audits
` [PATCH 6/8] integrity: Factor out common part of integrity_audit_msg()
` [PATCH 8/8] ima: Differentiate auditing policy rules from "audit" actions

[RFC PATCH ghak89 V1] audit: rename FILTER_TYPE to FILTER_EXCL
 2018-06-01 20:19 UTC  (9+ messages)

[PATCH v2 0/4] IMA: work on audit records produced by IMA
 2018-05-31 14:25 UTC  (5+ messages)
` [PATCH v2 1/4] ima: Call audit_log_string() rather than logging it untrusted
` [PATCH v2 2/4] ima: Use audit_log_format() rather than audit_log_string()
` [PATCH v2 3/4] ima: Do not audit if CONFIG_INTEGRITY_AUDIT is not set
` [PATCH v2 4/4] ima: Differentiate auditing policy rules from "audit" actions


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox