linux-audit

Messages by Date

2021/03/04 auditd daemon is changing /tmp permissions Ivan Castell
2021/03/03 Re: [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants Casey Schaufler
2021/03/03 Re: [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants Paul Moore
2021/03/03 Re: [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants Paul Moore
2021/03/03 Re: Audit ipset changes? Andreas Hasenack
2021/03/02 Re: Getting the value of a syscall's memory address argument - setxattr Richard Guy Briggs
2021/03/02 Re: Getting the value of a syscall's memory address argument - setxattr Steve Grubb
2021/03/02 Re: open_by_handle_at and CVE-2020-35501 Steve Grubb
2021/03/01 Re: Getting the value of a syscall's memory address argument - setxattr Alan Evangelista
2021/02/27 Re: Getting the value of a syscall's memory address argument - setxattr Richard Guy Briggs
2021/02/27 Re: Audit ipset changes? Richard Guy Briggs
2021/02/26 Getting the value of a syscall's memory address argument - setxattr Alan Evangelista
2021/02/26 Audit ipset changes? Andreas Hasenack
2021/02/25 Re: open_by_handle_at and CVE-2020-35501 Paul Moore
2021/02/25 open_by_handle_at and CVE-2020-35501 Steve Grubb
2021/02/24 Re: [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants Mimi Zohar
2021/02/23 Re: [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants Paul Moore
2021/02/23 Re: [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants Mimi Zohar
2021/02/23 Re: [PATCH v24 04/25] IMA: avoid label collisions with stacked LSMs Mimi Zohar
2021/02/22 Re: [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants Casey Schaufler
2021/02/22 Re: [PATCH v24 04/25] IMA: avoid label collisions with stacked LSMs Casey Schaufler
2021/02/22 Re: [GIT PULL] Audit patches for v5.12 pr-tracker-bot
2021/02/22 Re: [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants John Johansen
2021/02/22 Re: [RFC PATCH 4/4] apparmor: differentiate between subjective and objective task credentials John Johansen
2021/02/22 Re: [RFC PATCH 2/4] selinux: clarify task subjective and objective credentials John Johansen
2021/02/22 Re: [RFC PATCH 3/4] smack: differentiate between subjective and objective task credentials John Johansen
2021/02/21 Re: [RFC PATCH 4/4] apparmor: differentiate between subjective and objective task credentials Paul Moore
2021/02/21 Re: [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants Paul Moore
2021/02/20 Re: security_task_getsecid() and subjective vs objective task creds Paul Moore
2021/02/20 Re: [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants Paul Moore
2021/02/20 Re: [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants Paul Moore
2021/02/19 Re: [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants James Morris
2021/02/19 Re: security_task_getsecid() and subjective vs objective task creds James Morris
2021/02/19 Re: [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants Casey Schaufler
2021/02/19 [RFC PATCH 3/4] smack: differentiate between subjective and objective task credentials Paul Moore
2021/02/19 [RFC PATCH 4/4] apparmor: differentiate between subjective and objective task credentials Paul Moore
2021/02/19 [RFC PATCH 2/4] selinux: clarify task subjective and objective credentials Paul Moore
2021/02/19 [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants Paul Moore
2021/02/19 [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants Paul Moore
2021/02/19 Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
2021/02/19 Re: security_task_getsecid() and subjective vs objective task creds Paul Moore
2021/02/18 Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
2021/02/18 Re: security_task_getsecid() and subjective vs objective task creds Steve Grubb
2021/02/18 Re: [PATCH ghak124 v3] audit: log nftables configuration change events Florian Westphal
2021/02/18 Re: security_task_getsecid() and subjective vs objective task creds Casey Schaufler
2021/02/18 Re: security_task_getsecid() and subjective vs objective task creds Casey Schaufler
2021/02/18 Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
2021/02/18 security_task_getsecid() and subjective vs objective task creds Paul Moore
2021/02/18 Re: [PATCH ghak124 v3] audit: log nftables configuration change events Florian Westphal
2021/02/18 Re: [PATCH ghak124 v3] audit: log nftables configuration change events Florian Westphal
2021/02/18 Re: [PATCH ghak124 v3] audit: log nftables configuration change events Florian Westphal
2021/02/18 Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
2021/02/18 Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
2021/02/17 Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
2021/02/16 Re: [PATCH v24 04/25] IMA: avoid label collisions with stacked LSMs Casey Schaufler
2021/02/15 [GIT PULL] Audit patches for v5.12 Paul Moore
2021/02/12 Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
2021/02/12 Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
2021/02/12 audit 3.0.1 released Steve Grubb
2021/02/11 Re: Samba and AuditD Steve Grubb
2021/02/11 Re: [PATCH ghak124 v3] audit: log nftables configuration change events Steve Grubb
2021/02/11 Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
2021/02/11 Re: [PATCH ghak124 v3] audit: log nftables configuration change events Paul Moore
2021/02/10 Re: Samba and AuditD Steve Grubb
2021/02/10 Re: Auditd statsd integration Steve Grubb
2021/02/10 Re: Auditd statsd integration LC Bruzenak
2021/02/10 Re: Auditd statsd integration LC Bruzenak
2021/02/08 Auditd statsd integration Steve Grubb
2021/02/08 [ANNOUNCE][CFP] Linux Security Summit 2021 James Morris
2021/02/03 Re: [PATCH 2/2] audit: show (grand)parents information of an audit context Phil Zhang (xuanyzha)
2021/02/03 Re: [PATCH 2/2] audit: show (grand)parents information of an audit context Daniel Walker (danielwa)
2021/02/03 Re: [PATCH 2/2] audit: show (grand)parents information of an audit context kernel test robot
2021/02/02 Re: [PATCH 1/2] audit: show user land backtrace as part of audit context messages Ondrej Mosnacek
2021/02/02 [PATCH 2/2] audit: show (grand)parents information of an audit context Daniel Walker
2021/02/02 Re: [PATCH v24 00/25] LSM: Module stacking for AppArmor Topi Miettinen
2021/02/02 Re: [PATCH 1/2] audit: show user land backtrace as part of audit context messages Daniel Walker (danielwa)
2021/02/02 [PATCH 1/2] audit: show user land backtrace as part of audit context messages Daniel Walker
2021/02/02 Re: [PATCH 2/2] audit: show (grand)parents information of an audit context Phil Zhang (xuanyzha)
2021/02/02 Re: [PATCH v24 00/25] LSM: Module stacking for AppArmor Topi Miettinen
2021/02/02 Re: [PATCH 1/2] audit: show user land backtrace as part of audit context messages Paul Moore
2021/02/02 Re: [PATCH 2/2] audit: show (grand)parents information of an audit context Paul Moore
2021/02/02 Re: [PATCH 1/2] audit: show user land backtrace as part of audit context messages Paul Moore
2021/02/02 Re: [PATCH v24 00/25] LSM: Module stacking for AppArmor Casey Schaufler
2021/02/02 Re: [PATCH v24 00/25] LSM: Module stacking for AppArmor Casey Schaufler
2021/01/29 Fw:Re:[RFC,v3,1/1] audit: speed up syscall rule filtering yang.yang29
2021/01/27 Re: [PATCH v2] audit: Make audit_filter_syscall() return void Paul Moore
2021/01/27 Re: [RFC,v3,1/1] audit: speed up syscall rule filtering Paul Moore
2021/01/27 [PATCH v2] audit: Make audit_filter_syscall() return void menglong8 . dong
2021/01/27 Re: Occasional delayed output of events Burn Alting
2021/01/26 Re: Occasional delayed output of events Steve Grubb
2021/01/26 Re: [PATCH v24 21/25] audit: add support for non-syscall auxiliary records Richard Guy Briggs
2021/01/26 Re: [PATCH v24 21/25] audit: add support for non-syscall auxiliary records Paul Moore
2021/01/26 Re: [PATCH] audit: Make audit_filter_syscall() return void Richard Guy Briggs
2021/01/26 Re: [PATCH v24 21/25] audit: add support for non-syscall auxiliary records Casey Schaufler
2021/01/26 Re: [PATCH v24 21/25] audit: add support for non-syscall auxiliary records Richard Guy Briggs
2021/01/26 [PATCH] audit: Make audit_filter_syscall() return void menglong8 . dong
2021/01/26 [PATCH v24 25/25] AppArmor: Remove the exclusive flag Casey Schaufler
2021/01/26 [PATCH v24 24/25] LSM: Add /proc attr entry for full LSM context Casey Schaufler
2021/01/26 [PATCH v24 23/25] Audit: Add a new record for multiple object LSM attributes Casey Schaufler
2021/01/26 [PATCH v24 22/25] Audit: Add new record for multiple process LSM attributes Casey Schaufler
2021/01/26 [PATCH v24 21/25] audit: add support for non-syscall auxiliary records Casey Schaufler
2021/01/26 [PATCH v24 20/25] LSM: Verify LSM display sanity in binder Casey Schaufler
2021/01/26 [PATCH v24 18/25] LSM: security_secid_to_secctx in netlink netfilter Casey Schaufler
2021/01/26 [PATCH v24 16/25] LSM: Use lsmcontext in security_secid_to_secctx Casey Schaufler
2021/01/26 [PATCH v24 19/25] NET: Store LSM netlabel data in a lsmblob Casey Schaufler
2021/01/26 [PATCH v24 17/25] LSM: Use lsmcontext in security_inode_getsecctx Casey Schaufler
2021/01/26 [PATCH v24 15/25] LSM: Ensure the correct LSM context releaser Casey Schaufler
2021/01/26 [PATCH v24 14/25] LSM: Specify which LSM to display Casey Schaufler
2021/01/26 [PATCH v24 13/25] IMA: Change internal interfaces to use lsmblobs Casey Schaufler
2021/01/26 [PATCH v24 12/25] LSM: Use lsmblob in security_cred_getsecid Casey Schaufler
2021/01/26 [PATCH v24 11/25] LSM: Use lsmblob in security_inode_getsecid Casey Schaufler
2021/01/26 [PATCH v24 10/25] LSM: Use lsmblob in security_task_getsecid Casey Schaufler
2021/01/26 [PATCH v24 09/25] LSM: Use lsmblob in security_ipc_getsecid Casey Schaufler
2021/01/26 [PATCH v24 08/25] LSM: Use lsmblob in security_secid_to_secctx Casey Schaufler
2021/01/26 [PATCH v24 07/25] LSM: Use lsmblob in security_secctx_to_secid Casey Schaufler
2021/01/26 [PATCH v24 06/25] LSM: Use lsmblob in security_kernel_act_as Casey Schaufler
2021/01/26 [PATCH v24 04/25] IMA: avoid label collisions with stacked LSMs Casey Schaufler
2021/01/26 [PATCH v24 02/25] LSM: Add the lsmblob data structure. Casey Schaufler
2021/01/26 [PATCH v24 05/25] LSM: Use lsmblob in security_audit_rule_match Casey Schaufler
2021/01/26 [PATCH v24 03/25] LSM: provide lsm name and id slot mappings Casey Schaufler
2021/01/26 [PATCH v24 01/25] LSM: Infrastructure management of the sock security Casey Schaufler
2021/01/26 [PATCH v24 00/25] LSM: Module stacking for AppArmor Casey Schaufler
2021/01/26 Re: Occasional delayed output of events Burn Alting
2021/01/25 Re: Occasional delayed output of events Burn Alting
2021/01/25 Re: Occasional delayed output of events Steve Grubb
2021/01/25 Re: Occasional delayed output of events Burn Alting
2021/01/25 Re: Occasional delayed output of events Steve Grubb
2021/01/25 Fw:Re:Fw:Re:Fw:Re:[RFC,v1,1/1] audit: speed up syscall rule match while exiting syscall yang.yang29
2021/01/25 [RFC,v3,1/1] audit: speed up syscall rule filtering yang.yang29
2021/01/23 Re: Occasional delayed output of events Burn Alting
2021/01/22 Re: Fw:Re:Fw:Re:[RFC, v1, 1/1] audit: speed up syscall rule match while exiting syscall Paul Moore
2021/01/22 Re: [RFC, v2, 1/1] audit: speed up syscall rule match while exiting syscall Paul Moore
2021/01/21 [RFC PATCH] audit.spec: create audit group for log read access Enzo Matsumiya
2021/01/21 Fw:Re:Fw:Re:[RFC,v1,1/1] audit: speed up syscall rule match while exiting syscall yang.yang29
2021/01/21 [RFC,v2,1/1] audit: speed up syscall rule match while exiting syscall yang.yang29
2021/01/20 Probable bug in auditd Shourya Jaiswal
2021/01/20 Re: [RFC] audit.spec: create audit group for log read access Steve Grubb
2021/01/20 Re: 2nd Round AuditRules Questions Steve Grubb
2021/01/20 Re: Occasional delayed output of events Paul Moore
2021/01/20 Re: [RFC] audit.spec: create audit group for log read access Enzo Matsumiya
2021/01/20 Re: Probable bug in auditd Steve Grubb
2021/01/20 Re: [RFC] audit.spec: create audit group for log read access Steve Grubb
2021/01/20 [RFC] audit.spec: create audit group for log read access Enzo Matsumiya
2021/01/19 Re: Occasional delayed output of events Burn Alting
2021/01/19 2nd Round AuditRules Questions Joe Wulf
2021/01/19 Re: AuditRule Questions Joe Wulf
2021/01/19 Re: Occasional delayed output of events Steve Grubb
2021/01/19 Re: Occasional delayed output of events Richard Guy Briggs
2021/01/19 Re: Occasional delayed output of events Paul Moore
2021/01/19 Re: Occasional delayed output of events Burn Alting
2021/01/19 Re: AuditRule Questions Steve Grubb
2021/01/19 Re: Occasional delayed output of events Paul Moore
2021/01/19 AuditRule Questions Joe Wulf
2021/01/19 Re: AuditRule Questions Steve Grubb
2021/01/19 Re: Occasional delayed output of events Lenny Bruzenak
2021/01/19 Re: Occasional delayed output of events Burn Alting
2021/01/18 Re: Occasional delayed output of events Paul Moore
2021/01/18 Re: Occasional delayed output of events Burn Alting
2021/01/18 Re: Occasional delayed output of events Steve Grubb
2021/01/18 Re: Occasional delayed output of events Paul Moore
2021/01/18 Re: Possible typo in 22-ignore-chrony.rules Steve Grubb
2021/01/18 Possible typo in 22-ignore-chrony.rules Joe Wulf
2021/01/17 Re: Occasional delayed output of events Steve Grubb
2021/01/17 Re: Occasional delayed output of events Paul Moore
2021/01/15 Re: Occasional delayed output of events Burn Alting
2021/01/15 Re: Occasional delayed output of events Richard Guy Briggs
2021/01/15 Re: Occasional delayed output of events Burn Alting
2021/01/15 Re: [PATCH] audit: Remove leftover reference to the audit_tasklet Paul Moore
2021/01/15 [PATCH] audit: Remove leftover reference to the audit_tasklet Davidlohr Bueso
2021/01/14 Re: Fw:Re:[RFC,v1,1/1] audit: speed up syscall rule match while exiting syscall Paul Moore
2021/01/14 Fw:Re:[RFC,v1,1/1] audit: speed up syscall rule match while exiting syscall yang.yang29
2021/01/13 [RFC,v1,1/1] audit: speed up syscall rule match while exiting syscall yang.yang29
2021/01/13 Re: [RFC, v1, 1/1] audit: speed up syscall rule match while exiting syscall Paul Moore
2021/01/12 [PATCH ghak90 v11 08/11] audit: add support for containerid to network namespaces Richard Guy Briggs
2021/01/12 [PATCH ghak90 v11 11/11] audit: add capcontid to set contid outside init_user_ns Richard Guy Briggs
2021/01/12 [PATCH ghak90 v11 10/11] audit: track container nesting Richard Guy Briggs
2021/01/12 [PATCH ghak90 v11 09/11] audit: contid check descendancy and nesting Richard Guy Briggs
2021/01/12 [PATCH ghak90 v11 07/11] audit: add containerid filtering Richard Guy Briggs
2021/01/12 [PATCH ghak90 v11 06/11] audit: add containerid support for user records Richard Guy Briggs
2021/01/12 [PATCH ghak90 v11 05/11] audit: add support for non-syscall auxiliary records Richard Guy Briggs
2021/01/12 [PATCH ghak90 v11 04/11] audit: add contid support for signalling the audit daemon Richard Guy Briggs
2021/01/12 [PATCH ghak90 v11 03/11] audit: log container info of syscalls Richard Guy Briggs
2021/01/12 [PATCH ghak90 v11 02/11] audit: add container id Richard Guy Briggs
2021/01/12 [PATCH ghak90 v11 01/11] audit: collect audit task parameters Richard Guy Briggs
2021/01/12 [PATCH ghak90 v11 00/11] audit: implement container identifier Richard Guy Briggs
2021/01/09 Re: Occasional delayed output of events Burn Alting
2021/01/04 Re: [PATCH -next] kernel/audit: convert comma to semicolon Paul Moore
2021/01/04 Re: Occasional delayed output of events Burn Alting
2021/01/04 Re: Occasional delayed output of events Steve Grubb
2021/01/03 Re: Occasional delayed output of events Burn Alting
2021/01/03 Re: Occasional delayed output of events Steve Grubb
2021/01/01 Occasional delayed output of events Burn Alting
2020/12/29 Re: [PATCH v23 02/23] LSM: Create and manage the lsmblob data structure. Mimi Zohar
2020/12/29 Re: [PATCH v23 02/23] LSM: Create and manage the lsmblob data structure. Mimi Zohar
2020/12/29 Re: [PATCH v23 02/23] LSM: Create and manage the lsmblob data structure. Mimi Zohar
2020/12/29 Re: [PATCH v23 02/23] LSM: Create and manage the lsmblob data structure. Mimi Zohar
2020/12/29 Re: [PATCH v23 02/23] LSM: Create and manage the lsmblob data structure. Mimi Zohar
2020/12/29 Re: [GIT PULL] Audit patches for v5.11 pr-tracker-bot
2020/12/29 Re: [PATCH v23 02/23] LSM: Create and manage the lsmblob data structure. Mimi Zohar
2020/12/29 Re: [PATCH v23 02/23] LSM: Create and manage the lsmblob data structure. Mimi Zohar