public inbox for linux-audit@redhat.com
 help / color / mirror / Atom feed
 messages from 2018-07-20 22:14:48 to 2018-09-13 14:07:54 UTC [more...]

[RFC PATCH ghak10 v4 0/2] audit: Log modifying adjtimex(2) calls
 2018-09-13 14:07 UTC  (11+ messages)
` [RFC PATCH ghak10 v4 1/2] audit: Add functions to log time adjustments
` [RFC PATCH ghak10 v4 2/2] timekeeping/ntp: Audit clock/NTP params adjustments

[PATCH ghak10 v5 0/2] audit: Log modifying adjtimex(2) calls
 2018-09-13 13:59 UTC  (15+ messages)
` [PATCH ghak10 v5 1/2] audit: Add functions to log time adjustments
` [PATCH ghak10 v5 2/2] timekeeping/ntp: Audit clock/NTP params adjustments

[PATCH ghak95] audit: Do not log full CWD path on empty relative paths
 2018-09-13 13:57 UTC  (13+ messages)

Audit log decode
 2018-09-11 14:05 UTC  (4+ messages)

Troubleshooting Custom audispd Plugin
 2018-09-07 20:18 UTC  (5+ messages)

[PATCH 0/11 v3] audit: Fix various races when tagging and untagging mounts
 2018-09-04 16:06 UTC  (13+ messages)
` [PATCH 01/11] audit_tree: Remove mark->lock locking
` [PATCH 02/11] audit: Fix possible spurious -ENOSPC error
` [PATCH 03/11] audit: Fix possible tagging failures
` [PATCH 04/11] audit: Embed key into chunk
` [PATCH 05/11] audit: Make hash table insertion safe against concurrent lookups
` [PATCH 06/11] audit: Factor out chunk replacement code
` [PATCH 07/11] audit: Remove pointless check in insert_hash()
` [PATCH 08/11] audit: Provide helper for dropping mark's chunk reference
` [PATCH 09/11] audit: Allocate fsnotify mark independently of chunk
` [PATCH 10/11] audit: Replace chunk attached to mark instead of replacing mark
` [PATCH 11/11] audit: Use 'mark' name for fsnotify_mark variables
` [PATCH 12/11 TESTSUITE] audit_testsuite: Add stress test for tree watches

[PATCH 0/10 v2] audit: Fix various races when tagging and untagging mounts
 2018-09-04 14:11 UTC  (20+ messages)
` [PATCH 01/10] audit_tree: Remove mark->lock locking
` [PATCH 02/10] audit: Fix possible spurious -ENOSPC error
` [PATCH 04/10] audit: Embed key into chunk
` [PATCH 06/10] audit: Factor out chunk replacement code
` [PATCH 07/10] audit: Remove pointless check in insert_hash()
` [PATCH 09/10] audit: Allocate fsnotify mark independently of chunk
` [PATCH 10/10] audit: Replace chunk attached to mark instead of replacing mark

SOFTWARE_UPDATE on RHEL 7.6
 2018-08-29 18:34 UTC  (2+ messages)

[PATCH ghak90 (was ghak32) V4 00/10] audit: implement container identifier
 2018-08-24 16:01 UTC  (13+ messages)
` [PATCH ghak90 (was ghak32) V4 01/10] audit: collect audit task parameters
` [PATCH ghak90 (was ghak32) V4 02/10] audit: add container id
` [PATCH ghak90 (was ghak32) V4 03/10] audit: log container info of syscalls
` [PATCH ghak90 (was ghak32) V4 04/10] audit: add containerid support for ptrace and signals
` [PATCH ghak90 (was ghak32) V4 05/10] audit: add support for non-syscall auxiliary records
` [PATCH ghak90 (was ghak32) V4 06/10] audit: add containerid support for tty_audit
` [PATCH ghak90 (was ghak32) V4 07/10] audit: add containerid filtering
` [PATCH ghak90 (was ghak32) V4 08/10] audit: add support for containerid to network namespaces
` [PATCH ghak90 (was ghak32) V4 09/10] audit: NETFILTER_PKT: record each container ID associated with a netNS
` [PATCH ghak90 (was ghak32) V4 10/10] debug audit: read container ID of a process

configuration for busy docker host
 2018-08-23 16:01 UTC  (8+ messages)

Kernel 4.9.51 null pointer dereference add_rule with null key
 2018-08-17 23:28 UTC  (6+ messages)

[GIT PULL] Audit patches for v4.19
 2018-08-14 21:07 UTC 

[RFC PATCH ghak9 0/3] audit: Record the path of FDs passed to *at(2) syscalls
 2018-08-03  9:19 UTC  (16+ messages)

[RFC PATCH] audit: minimize our use of audit_log_format()
 2018-08-03  6:59 UTC  (4+ messages)

What time do the auditd timestamps represent?
 2018-08-02  2:31 UTC  (4+ messages)

[PATCH ghau51/ghau40 v4 0/6] add support for audit container identifier
 2018-07-31 20:11 UTC  (7+ messages)
` [PATCH ghau51/ghau40 v4 1/6] AUDIT_CONTAINER_OP message type basic support
` [PATCH ghau51/ghau40 v4 2/6] AUDIT_CONTAINER "
` [PATCH ghau51/ghau40 v4 3/6] auditctl: add support for AUDIT_CONTID filter
` [PATCH ghau51/ghau40 v4 4/6] add ausearch containerid support
` [PATCH ghau51/ghau40 v4 5/6] start normalization "
` [PATCH ghau51/ghau40 v4 6/6] libaudit: add support to get the task audit container identifier

[RFC PATCH ghak90 (was ghak32) V3 00/10] audit: implement container identifier
 2018-07-31 20:07 UTC  (42+ messages)
` [RFC PATCH ghak90 (was ghak32) V3 01/10] audit: add container id
` [RFC PATCH ghak90 (was ghak32) V3 02/10] audit: log container info of syscalls
` [RFC PATCH ghak90 (was ghak32) V3 04/10] audit: add support for non-syscall auxiliary records
` [RFC PATCH ghak90 (was ghak32) V3 05/10] audit: add containerid support for tty_audit
` [RFC PATCH ghak90 (was ghak32) V3 07/10] audit: add support for containerid to network namespaces
` [RFC PATCH ghak90 (was ghak32) V3 08/10] audit: NETFILTER_PKT: record each container ID associated with a netNS
` [RFC PATCH ghak90 (was ghak32) V3 09/10] debug audit: read container ID of a process

[GIT PULL] Audit fixes for v4.18 (#1)
 2018-07-31 20:03 UTC 

[PATCH v2] audit: fix potential null dereference 'context->module.name'
 2018-07-30 23:04 UTC  (3+ messages)

[PATCH 00/18] xfrm: Add compat layer
 2018-07-30 19:43 UTC  (13+ messages)
` [PATCH 07/18] netlink: Pass groups pointer to .bind()

[PATCH ghak59 V2 0/6] audit: config_change normalizations and event record gathering
 2018-07-27 19:48 UTC  (7+ messages)
` [PATCH ghak59 V2 1/6] audit: give a clue what CONFIG_CHANGE op was involved
` [PATCH ghak59 V2 2/6] audit: add syscall information to CONFIG_CHANGE records
` [PATCH ghak59 V2 3/6] audit: exclude user records from syscall context
` [PATCH ghak59 V2 4/6] audit: hand taken context to audit_kill_trees for syscall logging
` [PATCH ghak59 V2 5/6] audit: kill trees before logging syscall exit for exit/free
` [PATCH ghak59 V2 6/6] audit: extend config_change mark/watch/tree rule changes

[PATCH] audit: fix potential null dereference 'context->module.name'
 2018-07-25  0:55 UTC  (6+ messages)

[RFC PATCH ghak59 V1 0/6] audit: config_change normalizations and event record gathering
 2018-07-24 20:17 UTC  (8+ messages)
` [RFC PATCH ghak59 V1 3/6] audit: exclude user records from syscall context

[RFC PATCH] audit: use current whenever possible
 2018-07-23 21:24 UTC  (3+ messages)

[PATCH v2] rfkill: fix spelling mistake contidion to condition
 2018-07-23 19:06 UTC  (2+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox