lkml.org 
[lkml]   [2015]   [Sep]   [3]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    Subject[GIT PULL] Audit patches for 4.3
    Date
    Hi Linus,

    This is one of the larger audit patchsets in recent history, consisting of
    eight patches and almost 400 lines of changes. The bulk of the patchset is
    the new "audit by executable" functionality which allows admins to set an
    audit watch based on the executable on disk. Prior to this, admins could only
    track an application by PID, which has some obvious limitations. Beyond the
    new functionality we also have some refcnt fixes and a few minor cleanups.
    Please pull for 4.3.

    Thanks,
    -Paul

    ---
    The following changes since commit 0b08c5e59441d08ab4b5e72afefd5cd98a4d83df:

    audit: Fix check of return value of strnlen_user()
    (2015-06-11 15:49:54 -0400)

    are available in the git repository at:

    git://git.infradead.org/users/pcmoore/audit upstream

    for you to fetch changes up to 15ce414b82b07acb99afda6e4d9bd14f317b6011:

    fixup: audit: implement audit by executable (2015-08-12 22:04:07 -0400)

    ----------------------------------------------------------------
    Paul Moore (1):
    audit: fix uninitialized variable in audit_add_rule()

    Richard Guy Briggs (7):
    audit: eliminate unnecessary extra layer of watch references
    audit: eliminate unnecessary extra layer of watch parent references
    audit: make audit_del_rule() more robust
    audit: use macros for unset inode and device values
    audit: clean simple fsnotify implementation
    audit: implement audit by executable
    fixup: audit: implement audit by executable

    include/linux/audit.h | 4 +
    include/uapi/linux/audit.h | 5 +-
    kernel/Makefile | 2 +-
    kernel/audit.c | 2 +-
    kernel/audit.h | 18 ++++
    kernel/audit_fsnotify.c | 216 ++++++++++++++++++++++++++++++++++++++++++
    kernel/audit_tree.c | 2 +
    kernel/audit_watch.c | 56 +++++++++---
    kernel/auditfilter.c | 83 ++++++++++++-----
    kernel/auditsc.c | 9 +-
    10 files changed, 359 insertions(+), 38 deletions(-)
    create mode 100644 kernel/audit_fsnotify.c

    --
    paul moore
    security @ redhat



    \
     
     \ /
      Last update: 2015-09-03 23:01    [W:3.431 / U:0.004 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site