linux-audit.redhat.com archive mirror
 help / color / mirror / Atom feed
 messages from 2018-11-16 17:33:12 to 2019-01-09 12:43:04 UTC [more...]

[PATCH 00/14] Prepare syscall_get_arch for PTRACE_GET_SYSCALL_INFO
 2019-01-09 12:43 UTC  (7+ messages)
` [PATCH 01/14] Move EM_ARCOMPACT and EM_ARCV2 to uapi/linux/elf-em.h
` [PATCH 02/14] arc: define syscall_get_arch()
` [PATCH 03/14] c6x: "
` [PATCH 04/14] h8300: "
` [PATCH 05/14] Move EM_HEXAGON to uapi/linux/elf-em.h
` [PATCH 06/14] hexagon: define syscall_get_arch()

Audit filtering by parent process path
 2019-01-08 18:30 UTC  (2+ messages)

[PATCH v7 00/22] ptrace: add PTRACE_GET_SYSCALL_INFO request
 2019-01-07  2:54 UTC  (10+ messages)
` [PATCH v7 05/22] arc: define syscall_get_arch()
` [PATCH v7 06/22] c6x: "
` [PATCH v7 07/22] h8300: define remaining syscall_get_* functions
` [PATCH v7 09/22] hexagon: "
` [PATCH v7 11/22] nds32: define syscall_get_arch()
` [PATCH v7 12/22] nios2: "
` [PATCH v7 17/22] riscv: "
` [PATCH v7 19/22] unicore32: add asm/syscall.h
` [PATCH v7 20/22] syscall_get_arch: add "struct task_struct *" argument

[PATCH ghak90 (was ghak32) V4 00/10] audit: implement container identifier
 2019-01-04 22:04 UTC  (29+ messages)
` [PATCH ghak90 (was ghak32) V4 01/10] audit: collect audit task parameters
` [PATCH ghak90 (was ghak32) V4 05/10] audit: add support for non-syscall auxiliary records
` [PATCH ghak90 (was ghak32) V4 06/10] audit: add containerid support for tty_audit
` [PATCH ghak90 (was ghak32) V4 09/10] audit: NETFILTER_PKT: record each container ID associated with a netNS

[GIT PULL] Audit patches for v4.21
 2018-12-27 22:05 UTC  (2+ messages)

Found (and fixed) ausearch checkpoint bug
 2018-12-26 15:23 UTC  (2+ messages)

[PATCH v5 00/25] ptrace: add PTRACE_GET_SYSCALL_INFO request
 2018-12-19  5:58 UTC  (21+ messages)
` [PATCH v5 03/25] arc: define syscall_get_arch()
` [PATCH v5 04/25] c6x: "
` [PATCH v5 06/25] csky: "
` [PATCH v5 07/25] h8300: define remaining syscall_get_* functions
` [PATCH v5 09/25] hexagon: "
` [PATCH v5 11/25] nds32: define syscall_get_arch()
` [PATCH v5 12/25] nios2: "
` [PATCH v5 17/25] riscv: "
` [PATCH v5 19/25] xtensa: define syscall_get_* functions
` [PATCH v5 21/25] unicore32: add asm/syscall.h
` [PATCH v5 22/25] syscall_get_arch: add "struct task_struct *" argument

[RFC PATCH] audit-testsuite: improve our chances of losing records in lost_reset
 2018-12-15 17:35 UTC  (8+ messages)

[RFC PATCH ghak100 V1 0/2] audit: avoid umount hangs on missing mount
 2018-12-14 23:03 UTC  (12+ messages)
` [RFC PATCH ghak100 V1 1/2] audit: avoid fcaps on MNT_FORCE
` [RFC PATCH ghak100 V1 2/2] audit: moar filter PATH records keyed on filesystem magic

[PATCH v6 00/27] ptrace: add PTRACE_GET_SYSCALL_INFO request
 2018-12-14 20:15 UTC  (14+ messages)
` [PATCH v6 05/27] arc: define syscall_get_arch()
` [PATCH v6 06/27] c6x: "
` [PATCH v6 08/27] csky: "
` [PATCH v6 09/27] h8300: define remaining syscall_get_* functions
` [PATCH v6 11/27] hexagon: "
` [PATCH v6 13/27] nds32: define syscall_get_arch()
` [PATCH v6 14/27] nios2: "
` [PATCH v6 19/27] riscv: "
` [PATCH v6 21/27] xtensa: define syscall_get_* functions
` [PATCH v6 23/27] unicore32: add asm/syscall.h
` [PATCH v6 24/27] syscall_get_arch: add "struct task_struct *" argument

[PATCH -next] audit: remove duplicated include from audit.c
 2018-12-14 17:14 UTC  (4+ messages)

[RFC PATCH] audit-testsuite: restrict the syscall_socketcall test to x86/x86_64
 2018-12-13 22:22 UTC  (2+ messages)

[PATCH ghak59 V3 0/4] audit: config_change normalizations and event record gathering
 2018-12-12 12:57 UTC  (10+ messages)
` [PATCH ghak59 V3 1/4] audit: give a clue what CONFIG_CHANGE op was involved
` [PATCH ghak59 V3 2/4] audit: add syscall information to CONFIG_CHANGE records
` [PATCH ghak59 V3 3/4] audit: hand taken context to audit_kill_trees for syscall logging
` [PATCH ghak59 V3 4/4] audit: extend config_change mark/watch/tree rule changes

[PATCH ghak95] audit: Do not log full CWD path on empty relative paths
 2018-12-04 22:19 UTC  (7+ messages)

operation not supported on filtering
 2018-12-04 16:12 UTC  (8+ messages)

use openat to create a file, then audit log can't show the full path name ?
 2018-12-04  1:11 UTC  (2+ messages)

[PATCH V2] audit: shorten PATH cap values when zero
 2018-12-04  0:29 UTC  (2+ messages)

Disabling local logging with write_logs = no
 2018-12-03 15:17 UTC  (2+ messages)

Query regarding to audit netlink call
 2018-11-28  8:30 UTC  (3+ messages)

Q: encryted log
 2018-11-27 23:01 UTC  (5+ messages)

[PATCH] audit: remove some duplicated includes
 2018-11-27 22:19 UTC  (4+ messages)

[PATCH v2 00/15] Prepare for PTRACE_GET_SYSCALL_INFO
 2018-11-27 10:34 UTC  (19+ messages)
    ` [PATCH v2 07/15] arc: define syscall_get_arch()
    ` [PATCH v2 08/15] c6x: "
    ` [PATCH v2 09/15] h8300: "
    ` [PATCH v2 10/15] hexagon: "
    ` [PATCH v2 11/15] nds32: "
    ` [PATCH v2 12/15] nios2: "
    ` [PATCH v2 13/15] riscv: "
    ` [PATCH v2 14/15] unicore32: "
    ` [PATCH v2 15/15] xtensa: "
    ` [PATCH v2 16/15] syscall_get_arch: add "struct task_struct *" argument
          ` [PATCH v2 16/15 v2] "

[PATCH] audit: use current whenever possible
 2018-11-26 23:50 UTC  (3+ messages)

[PATCH] audit: minimize our use of audit_log_format()
 2018-11-26 23:43 UTC  (3+ messages)

[PATCH] audit/sc: remove some duplicated includes
 2018-11-26 23:39 UTC  (2+ messages)

[PATCH] audit/filter: remove some duplicated includes
 2018-11-26 23:38 UTC  (2+ messages)

[PATCH] kernel/audit: remove some duplicated includes
 2018-11-26 23:38 UTC  (2+ messages)

[PATCH] fsnotify: remove some duplicated includes
 2018-11-26 23:37 UTC  (2+ messages)

[RFC PATCH 0/3] simplify struct audit_krule reveals bug
 2018-11-26 21:43 UTC  (7+ messages)
` [RFC PATCH 1/3] audit: remove arch_f pointer from struct audit_krule

Logging from within kernel
 2018-11-26 17:54 UTC  (5+ messages)

[PATCH] audit: shorten PATH cap values when zero
 2018-11-19 22:05 UTC  (5+ messages)

[PATCH] audit: remove WATCH and TREE config options
 2018-11-19 21:58 UTC  (2+ messages)

[PATCH] audit: localize audit_log_session_info prototype
 2018-11-19 17:36 UTC  (2+ messages)

[PATCH] audit: use session_info helper
 2018-11-19 17:36 UTC  (2+ messages)

[PATCH ghak59 V2 0/6] audit: config_change normalizations and event record gathering
 2018-11-19 16:32 UTC  (13+ messages)
` [PATCH ghak59 V2 1/6] audit: give a clue what CONFIG_CHANGE op was involved
` [PATCH ghak59 V2 2/6] audit: add syscall information to CONFIG_CHANGE records
` [PATCH ghak59 V2 3/6] audit: exclude user records from syscall context
` [PATCH ghak59 V2 4/6] audit: hand taken context to audit_kill_trees for syscall logging
` [PATCH ghak59 V2 5/6] audit: kill trees before logging syscall exit for exit/free
` [PATCH ghak59 V2 6/6] audit: extend config_change mark/watch/tree rule changes

[PATCH 0/11 v3] audit: Fix various races when tagging and untagging mounts
 2018-11-19 15:19 UTC  (5+ messages)
` [PATCH 12/11 TESTSUITE] audit_testsuite: Add stress test for tree watches

Using audisp remote results in "dispatch err (pipe full) event lost"
 2018-11-18 21:19 UTC  (2+ messages)

auditd and CAP_AUDIT_READ
 2018-11-17 17:30 UTC  (4+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).