From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1759422AbZBFQPi (ORCPT ); Fri, 6 Feb 2009 11:15:38 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1751646AbZBFQP3 (ORCPT ); Fri, 6 Feb 2009 11:15:29 -0500 Received: from e2.ny.us.ibm.com ([32.97.182.142]:44366 "EHLO e2.ny.us.ibm.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751212AbZBFQP2 (ORCPT ); Fri, 6 Feb 2009 11:15:28 -0500 Subject: Re: integrity: audit From: Mimi Zohar To: Steve Grubb Cc: Linux Audit , linux-kernel@vger.kernel.org, Andrew Morton , James Morris , David Safford , Serge Hallyn In-Reply-To: <200902061001.06040.sgrubb@redhat.com> References: <1233924230.3135.5.camel@localhost.localdomain> <200902061001.06040.sgrubb@redhat.com> Content-Type: text/plain Date: Fri, 06 Feb 2009 11:15:14 -0500 Message-Id: <1233936914.3135.19.camel@localhost.localdomain> Mime-Version: 1.0 X-Mailer: Evolution 2.22.3.1 (2.22.3.1-1.fc9) Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri, 2009-02-06 at 10:01 -0500, Steve Grubb wrote: > On Friday 06 February 2009 07:43:50 am Mimi Zohar wrote: > > This patch adds support to auditd for integrity messages, which are > > issued as a result of the integrity patchset that was applied to the > > security-testing-2.6/#next tree. > > > > Signed-off-by: Mimi Zohar > > NACK to anything around this. So far, no integrity patches have been reviewed > by the audit folks. > > -Steve The integrity auditing discussions took place a while ago in August 2007 (http://osdir.com/ml/linux.redhat.security.audit/2007-09/msg00007.html). The integrity patches are in security-testing-2.6/#next and the auditd patch I just posted to linux-audit. How do you suggest we go forward? Thanks! Mimi