From: Al Viro <viro@ftp.linux.org.uk>
To: torvalds@osdl.org
Cc: linux-kernel@vger.kernel.org
Subject: [PATCHSET] audit fixes
Date: Mon, 01 May 2006 11:28:13 +0100 [thread overview]
Message-ID: <E1FaVdV-00050X-EH@ZenIV.linux.org.uk> (raw)
Linus, please pull audit fixes from
git://git.kernel.org/pub/scm/linux/kernel/git/viro/audit-current.git/ audit.b10
This stuff had been sitting in -mm for weeks now and fixes a bunch of bugs -
both performance (killing serious unnecessary overhead) and outright leaks
and deadlocks.
Shortlog:
Al Viro:
deal with deadlocks in audit_free()
move call of audit_free() into do_exit()
drop gfp_mask in audit_log_exit()
drop task argument of audit_syscall_{entry,exit}
no need to wank with task_lock() and pinning task down in audit_syscall_exit()
Darrel Goeddel:
support for context based audit filtering
support for context based audit filtering, part 2
Steve Grubb:
sockaddr patch
audit inode patch
change lspp ipc auditing
Reworked patch for labels on user space messages
More user space subject labels
Rework of IPC auditing
Audit Filter Performance
Diffstat:
arch/i386/kernel/ptrace.c | 7
arch/i386/kernel/vm86.c | 2
arch/ia64/kernel/ptrace.c | 4
arch/mips/kernel/ptrace.c | 4
arch/powerpc/kernel/ptrace.c | 5
arch/s390/kernel/ptrace.c | 5
arch/sparc64/kernel/ptrace.c | 5
arch/um/kernel/ptrace.c | 6
arch/x86_64/kernel/ptrace.c | 6
include/linux/audit.h | 22 ++-
include/linux/netlink.h | 1
include/linux/security.h | 16 --
include/linux/selinux.h | 177 +++++++++++++++++++++++++
ipc/msg.c | 11 +
ipc/sem.c | 11 +
ipc/shm.c | 19 ++
ipc/util.c | 7
kernel/audit.c | 160 ++++++++++++++++++----
kernel/audit.h | 10 -
kernel/auditfilter.c | 289 ++++++++++++++++++++++++++++++++++++-----
kernel/auditsc.c | 269 +++++++++++++++++++-------------------
kernel/exit.c | 3
kernel/fork.c | 2
net/netlink/af_netlink.c | 2
net/socket.c | 2
security/dummy.c | 6
security/selinux/Makefile | 2
security/selinux/avc.c | 13 -
security/selinux/exports.c | 74 ++++++++++
security/selinux/hooks.c | 8 -
security/selinux/ss/mls.c | 30 ++++
security/selinux/ss/mls.h | 4
security/selinux/ss/services.c | 235 +++++++++++++++++++++++++++++++++
33 files changed, 1142 insertions(+), 275 deletions(-)
next reply other threads:[~2006-05-01 10:28 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-05-01 10:28 Al Viro [this message]
2006-05-01 20:56 ` [PATCHSET] audit fixes Randy.Dunlap
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=E1FaVdV-00050X-EH@ZenIV.linux.org.uk \
--to=viro@ftp.linux.org.uk \
--cc=linux-kernel@vger.kernel.org \
--cc=torvalds@osdl.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox