From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Sverdlin, Alexander (Nokia - DE/Ulm)" Subject: Re: [PATCH] audit: always enable syscall auditing when supported and audit is enabled Date: Mon, 28 Jan 2019 14:45:39 +0000 Message-ID: References: <20151208164237.15736.42955.stgit@localhost> <5490ae28-251b-bfda-38a6-5be201a4a8d8@nokia.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: In-Reply-To: Content-Language: en-US Content-ID: Sender: linux-kernel-owner@vger.kernel.org To: Paul Moore Cc: Paul Moore , "linux-audit@redhat.com" , Richard Guy Briggs , Greg Kroah-Hartman , Alexei Starovoitov , Daniel Borkmann , "linux-kernel@vger.kernel.org" List-Id: linux-audit@redhat.com SGVsbG8gUGF1bCwNCg0KT24gMjgvMDEvMjAxOSAxNToxOSwgUGF1bCBNb29yZSB3cm90ZToNCj4+ PiBUbyB0aGUgYmVzdCBvZiBvdXIga25vd2xlZGdlLCBldmVyeW9uZSB3aG8gZW5hYmxlcyBhdWRp dCBhdCBjb21waWxlDQo+Pj4gdGltZSBhbHNvIGVuYWJsZXMgc3lzY2FsbCBhdWRpdGluZzsgdGhp cyBwYXRjaCBzaW1wbGlmaWVzIHRoZSBLY29uZmlnDQo+Pj4gbWVudXMgYnkgcmVtb3ZpbmcgdGhl IG9wdGlvbiB0byBkaXNhYmxlIHN5c2NhbGwgYXVkaXRpbmcgd2hlbiBhdWRpdA0KPj4+IGlzIHNl bGVjdGVkIGFuZCB0aGUgdGFyZ2V0IGFyY2ggc3VwcG9ydHMgaXQuDQo+Pj4NCj4+PiBTaWduZWQt b2ZmLWJ5OiBQYXVsIE1vb3JlIDxwbW9vcmVAcmVkaGF0LmNvbT4NCj4+IHRoaXMgcGF0Y2ggaXMg cmVzcG9uc2libGUgZm9yIG1hc3NpdmUgcGVyZm9ybWFuY2UgZGVncmFkYXRpb24gZm9yIHRob3Nl DQo+PiB3aG8gdXNlZCBvbmx5IENPTkZJR19TRUNVUklUWV9BUFBBUk1PUi4NCj4+DQo+PiBBbmQg dGhlIG51bWJlcnMgYXJlLCB0YWtlIHRoZSBmb2xsb3dpbmcgdGVzdCBmb3IgaW5zdGFuY2U6DQo+ Pg0KPj4gZGQgaWY9L2Rldi96ZXJvIG9mPS9kZXYvbnVsbCBjb3VudD0yTQ0KPj4NCj4+IEFSTTY0 OiAgICAgIDUwME1CL3MgLT4gMzUwTUIvcw0KPj4gQVJNOiAgICAgICAgNDAwTUIvcyAtPiAzMDBN Qi9zDQo+IEhpIHRoZXJlLg0KPiANCj4gT3V0IG9mIGN1cmlvc2l0eSwgd2hhdCBrZXJuZWwvZGlz dHJpYnV0aW9uIGFyZSB5b3UgcnVubmluZywgb3IgaXMgdGhpcw0KPiBhIGN1c3RvbSBrZXJuZWwg Y29tcGlsZT8gIENhbiB5b3UgYWxzbyBzaGFyZSB0aGUgb3V0cHV0IG9mICdhdWRpdGN0bA0KPiAt bCcgZnJvbSB5b3VyIHN5c3RlbT8gIFRoZSBnZW5lcmFsIGFwcHJvYWNoIHRha2VuIGJ5IGV2ZXJ5 b25lIHRvDQo+IHR1cm4tb2ZmIHRoZSBwZXItc3lzY2FsbCBhdWRpdCBvdmVyaGVhZCBpcyB0byBh ZGQgdGhlICItYSBuZXZlcix0YXNrIg0KPiBydWxlIHRvIHRoZWlyIGF1ZGl0IGNvbmZpZ3VyYXRp b246DQo+IA0KPiAgIyBhdWRpdGN0bCAtYSBuZXZlcix0YXNrDQo+IA0KPiBJZiB5b3UgYXJlIHVz aW5nIEZlZG9yYS9DZW50T1MvUkhFTCwgb3IgYSBzaW1pbGFybHkgY29uZmlndXJlZCBzeXN0ZW0s DQo+IHlvdSBjYW4gZmluZCB0aGlzIGNvbmZpZ3VyYXRpb24gaW4gdGhlIC9ldGMvYXVkaXQvYXVk aXQucnVsZXMgZmlsZSAoYmUNCj4gd2FybmVkLCB0aGF0IGZpbGUgaXMgYXV0b21hdGljYWxseSBn ZW5lcmF0ZWQgYmFzZWQgb24NCj4gL2V0Yy9hdWRpdC9ydWxlcy5kKS4NCg0KaGVyZSBhcmUgc29t ZSBwZXJmIHJlcG9ydHMgZm9yIHlvdXIgcmVmZXJlbmNlOg0KDQpMaW51eCBmY3QtMGEgNC45LjE0 NC14eHggYXJtdjdsIGFybXY3bCBhcm12N2wgR05VL0xpbnV4DQojIE92ZXJoZWFkICBDb21tYW5k ICBTaGFyZWQgT2JqZWN0ICAgICAgU3ltYm9sICAgICAgICAgICAgICAgICAgICAgIA0KIyAuLi4u Li4uLiAgLi4uLi4uLiAgLi4uLi4uLi4uLi4uLi4uLi4gIC4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4NCiMNCiAgICAxNC4zMiUgIGRkICAgICAgIFtrZXJuZWwua2FsbHN5bXNdICBba10gdmVj dG9yX3N3aQ0KICAgIDEzLjcwJSAgZGQgICAgICAgbGliYy0yLjI4LnNvICAgICAgIFsuXSBfX2xp YmNfZG9fc3lzY2FsbA0KICAgICA4LjQyJSAgZGQgICAgICAgW2tlcm5lbC5rYWxsc3ltc10gIFtr XSBjdXJyZW50X2tlcm5lbF90aW1lNjQNCiAgICAgNS42NSUgIGRkICAgICAgIFtrZXJuZWwua2Fs bHN5bXNdICBba10gYXJtX2NsZWFyX3VzZXINCiAgICAgNS42NSUgIGRkICAgICAgIFtrZXJuZWwu a2FsbHN5bXNdICBba10gX19mZ2V0X2xpZ2h0DQogICAgIDUuNTQlICBkZCAgICAgICBba2VybmVs LmthbGxzeW1zXSAgW2tdIF9fYXVkaXRfc3lzY2FsbF9lbnRyeQ0KICAgICAzLjc5JSAgZGQgICAg ICAgW2tlcm5lbC5rYWxsc3ltc10gIFtrXSBmc25vdGlmeQ0KICAgICAyLjk3JSAgZGQgICAgICAg bGliYy0yLjI4LnNvICAgICAgIFsuXSBtZW1jcHkNCiAgICAgMi45NCUgIGRkICAgICAgIFtrZXJu ZWwua2FsbHN5bXNdICBba10gX19hdWRpdF9zeXNjYWxsX2V4aXQNCiAgICAgMi42NyUgIGRkICAg ICAgIFtrZXJuZWwua2FsbHN5bXNdICBba10gX19mc25vdGlmeV9wYXJlbnQNCiAgICAgMi40MyUg IGRkICAgICAgIFtrZXJuZWwua2FsbHN5bXNdICBba10gdmZzX3JlYWQNCiAgICAgMi4yNCUgIGRk ICAgICAgIFtrZXJuZWwua2FsbHN5bXNdICBba10gX192ZnNfcmVhZA0KICAgICAyLjIzJSAgZGQg ICAgICAgW2tlcm5lbC5rYWxsc3ltc10gIFtrXSB2ZnNfd3JpdGUNCiAgICAgMS45NiUgIGRkICAg ICAgIFtrZXJuZWwua2FsbHN5bXNdICBba10gc3lzY2FsbF90cmFjZV9leGl0DQogICAgIDEuNzEl ICBkZCAgICAgICBba2VybmVsLmthbGxzeW1zXSAgW2tdIHN5c2NhbGxfdHJhY2VfZW50ZXINCiAg ICAgMS4yMyUgIGRkICAgICAgIFtrZXJuZWwua2FsbHN5bXNdICBba10gcndfdmVyaWZ5X2FyZWEN CiAgICAgMS4yMiUgIGRkICAgICAgIGxpYmMtMi4yOC5zbyAgICAgICBbLl0gcmVhZA0KICAgICAx LjE0JSAgZGQgICAgICAgW2tlcm5lbC5rYWxsc3ltc10gIFtrXSBzZWN1cml0eV9maWxlX3Blcm1p c3Npb24NCiAgICAgMS4wNyUgIGRkICAgICAgIFtrZXJuZWwua2FsbHN5bXNdICBba10gaW92X2l0 ZXJfemVybw0KICAgICAxLjAxJSAgZGQgICAgICAgW2tlcm5lbC5rYWxsc3ltc10gIFtrXSBfX3N5 c190cmFjZV9yZXR1cm4NCiAgICAgMC44OCUgIGRkICAgICAgIGxpYmMtMi4yOC5zbyAgICAgICBb Ll0gX19HSV9fX2xpYmNfd3JpdGUNCiAgICAgMC44NSUgIGRkICAgICAgIGRkLmNvcmV1dGlscyAg ICAgICBbLl0gMHgwMDAwM2M0OA0KICAgICAwLjg0JSAgZGQgICAgICAgW2tlcm5lbC5rYWxsc3lt c10gIFtrXSByZWFkX2l0ZXJfemVybw0KICAgICAwLjc5JSAgZGQgICAgICAgW2tlcm5lbC5rYWxs c3ltc10gIFtrXSB1bnJvbGxfdHJlZV9yZWZzDQogICAgIDAuNzUlICBkZCAgICAgICBba2VybmVs LmthbGxzeW1zXSAgW2tdIF9fdmZzX3dyaXRlDQogICAgIDAuNjglICBkZCAgICAgICBba2VybmVs LmthbGxzeW1zXSAgW2tdIF9fZmRnZXRfcG9zDQogICAgIDAuNjQlICBkZCAgICAgICBkZC5jb3Jl dXRpbHMgICAgICAgWy5dIDB4MDAwMDEzYTQNCiAgICAgMC41OSUgIGRkICAgICAgIFtrZXJuZWwu a2FsbHN5bXNdICBba10gZHB1dA0KICAgICAwLjU3JSAgZGQgICAgICAgW2tlcm5lbC5rYWxsc3lt c10gIFtrXSBrZnJlZQ0KICAgICAwLjU2JSAgZGQgICAgICAgW2tlcm5lbC5rYWxsc3ltc10gIFtr XSBwYXRoX3B1dA0KICAgICAwLjUyJSAgZGQgICAgICAgW2tlcm5lbC5rYWxsc3ltc10gIFtrXSBy ZXRfdG9fdXNlcg0KDQpMaW51eCBmY3RqLTBhIDQuNC4xNjctZzQyMjBjMDkteHh4IGFybXY3bCBH TlUvTGludXgNCiMgT3ZlcmhlYWQgIENvbW1hbmQgIFNoYXJlZCBPYmplY3QgICAgICBTeW1ib2wg ICAgICAgICAgICAgICAgICAgICAgICAgDQojIC4uLi4uLi4uICAuLi4uLi4uICAuLi4uLi4uLi4u Li4uLi4uLiAgLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLg0KIw0KICAgIDIzLjkxJSAg ZGQgICAgICAgW2tlcm5lbC5rYWxsc3ltc10gIFtrXSB2ZWN0b3Jfc3dpICAgICAgICAgICAgICAg ICANCiAgICAxOS41NyUgIGRkICAgICAgIGxpYmMtMi4yOC5zbyAgICAgICBbLl0gX19saWJjX2Rv X3N5c2NhbGwgICAgICAgICAgDQogICAgIDUuNjclICBkZCAgICAgICBba2VybmVsLmthbGxzeW1z XSAgW2tdIGFybV9jbGVhcl91c2VyICAgICAgICAgICAgIA0KICAgICA0LjI1JSAgZGQgICAgICAg bGliYy0yLjI4LnNvICAgICAgIFsuXSBtZW1jcHkgICAgICAgICAgICAgICAgICAgICANCiAgICAg NC4yMiUgIGRkICAgICAgIFtrZXJuZWwua2FsbHN5bXNdICBba10gZnNub3RpZnkgICAgICAgICAg ICAgICAgICAgDQogICAgIDMuOTMlICBkZCAgICAgICBba2VybmVsLmthbGxzeW1zXSAgW2tdIF9f ZmdldF9saWdodCAgICAgICAgICAgICAgIA0KICAgICAzLjEwJSAgZGQgICAgICAgW2tlcm5lbC5r YWxsc3ltc10gIFtrXSByZWFkX2l0ZXJfemVybyAgICAgICAgICAgICANCiAgICAgMi41MSUgIGRk ICAgICAgIFtrZXJuZWwua2FsbHN5bXNdICBba10gdmZzX3dyaXRlICAgICAgICAgICAgICAgICAg DQogICAgIDIuMDYlICBkZCAgICAgICBba2VybmVsLmthbGxzeW1zXSAgW2tdIHJldF9mYXN0X3N5 c2NhbGwgICAgICAgICAgIA0KICAgICAxLjk3JSAgZGQgICAgICAgW2tlcm5lbC5rYWxsc3ltc10g IFtrXSBfX2Zzbm90aWZ5X3BhcmVudCAgICAgICAgICANCiAgICAgMS42NiUgIGRkICAgICAgIGxp YmMtMi4yOC5zbyAgICAgICBbLl0gcmVhZCAgICAgICAgICAgICAgICAgICAgICAgDQogICAgIDEu NjUlICBkZCAgICAgICBba2VybmVsLmthbGxzeW1zXSAgW2tdIF9fdmZzX3JlYWQgICAgICAgICAg ICAgICAgIA0KICAgICAxLjYzJSAgZGQgICAgICAgW2tlcm5lbC5rYWxsc3ltc10gIFtrXSBtbWlv c2V0ICAgICAgICAgICAgICAgICAgICANCiAgICAgMS42MSUgIGRkICAgICAgIFtrZXJuZWwua2Fs bHN5bXNdICBba10gdmZzX3JlYWQgICAgICAgICAgICAgICAgICAgDQogICAgIDEuNDclICBkZCAg ICAgICBsaWJjLTIuMjguc28gICAgICAgWy5dIF9fR0lfX19saWJjX3dyaXRlICAgICAgICAgIA0K ICAgICAxLjM5JSAgZGQgICAgICAgW2tlcm5lbC5rYWxsc3ltc10gIFtrXSByd192ZXJpZnlfYXJl YSAgICAgICAgICAgICANCiAgICAgMS4zOSUgIGRkICAgICAgIFtrZXJuZWwua2FsbHN5bXNdICBb a10gc2VjdXJpdHlfZmlsZV9wZXJtaXNzaW9uICAgDQogICAgIDEuMzQlICBkZCAgICAgICBba2Vy bmVsLmthbGxzeW1zXSAgW2tdIGlvdl9pdGVyX2luaXQgICAgICAgICAgICAgIA0KICAgICAxLjM0 JSAgZGQgICAgICAgW2tlcm5lbC5rYWxsc3ltc10gIFtrXSBpb3ZfaXRlcl96ZXJvICAgICAgICAg ICAgICANCiAgICAgMS4yMCUgIGRkICAgICAgIFtrZXJuZWwua2FsbHN5bXNdICBba10gbG9jYWxf cmVzdGFydCAgICAgICAgICAgICAgDQogICAgIDAuODklICBkZCAgICAgICBba2VybmVsLmthbGxz eW1zXSAgW2tdIHN5c19yZWFkICAgICAgICAgICAgICAgICAgIA0KICAgICAwLjg5JSAgZGQgICAg ICAgW2tlcm5lbC5rYWxsc3ltc10gIFtrXSBfY29uZF9yZXNjaGVkICAgICAgICAgICAgICANCiAg ICAgMC44NiUgIGRkICAgICAgIFtrZXJuZWwua2FsbHN5bXNdICBba10gX19mZGdldF9wb3MgICAg ICAgICAgICAgICAgDQogICAgIDAuODUlICBkZCAgICAgICBba2VybmVsLmthbGxzeW1zXSAgW2td IHN5c193cml0ZSAgICAgICAgICAgICAgICAgIA0KICAgICAwLjc3JSAgZGQgICAgICAgZGQgICAg ICAgICAgICAgICAgIFsuXSAweDAwMDAzZGYwICAgICAgICAgICAgICAgICANCiAgICAgMC43MiUg IGRkICAgICAgIFtrZXJuZWwua2FsbHN5bXNdICBba10gX192ZnNfd3JpdGUgICAgICAgICAgICAg ICAgDQogICAgIDAuNjElICBkZCAgICAgICBkZCAgICAgICAgICAgICAgICAgWy5dIDB4MDAwMDM5 NDYgICAgICAgICAgICAgICAgIA0KICAgICAwLjU1JSAgZGQgICAgICAgZGQgICAgICAgICAgICAg ICAgIFsuXSAweDAwMDAzOGVlICAgICAgICAgICAgICAgICANCiAgICAgMC41MSUgIGRkICAgICAg IGRkICAgICAgICAgICAgICAgICBbLl0gMHgwMDAwM2NhOCAgICAgICAgICAgICAgICAgDQoNCg0K LS0gDQpCZXN0IHJlZ2FyZHMsDQpBbGV4YW5kZXIgU3ZlcmRsaW4uDQo=