linux-audit  

Messages by Thread

• • Re: [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants John Johansen
  • Re: [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants Paul Moore
  • Re: [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants Paul Moore
  • Re: [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants Paul Moore
  • Re: [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants John Johansen
  • Re: [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants Mimi Zohar
  • Re: [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants Richard Guy Briggs
  • Re: [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants Paul Moore
  • Re: [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants John Johansen
  • Re: [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants Paul Moore
  • [RFC PATCH 2/4] selinux: clarify task subjective and objective credentials Paul Moore
  • Re: [RFC PATCH 2/4] selinux: clarify task subjective and objective credentials John Johansen
  • Re: [RFC PATCH 2/4] selinux: clarify task subjective and objective credentials Richard Guy Briggs
  • Re: [RFC PATCH 2/4] selinux: clarify task subjective and objective credentials John Johansen
  • Re: [RFC PATCH 2/4] selinux: clarify task subjective and objective credentials Paul Moore
  • Re: [RFC PATCH 2/4] selinux: clarify task subjective and objective credentials Paul Moore
  • [RFC PATCH 4/4] apparmor: differentiate between subjective and objective task credentials Paul Moore
  • Re: [RFC PATCH 4/4] apparmor: differentiate between subjective and objective task credentials John Johansen
  • Re: [RFC PATCH 4/4] apparmor: differentiate between subjective and objective task credentials Paul Moore
  • [RFC PATCH 3/4] smack: differentiate between subjective and objective task credentials Paul Moore
  • Re: [RFC PATCH 3/4] smack: differentiate between subjective and objective task credentials John Johansen
  • Re: [RFC PATCH 3/4] smack: differentiate between subjective and objective task credentials Richard Guy Briggs
  • Re: [RFC PATCH 3/4] smack: differentiate between subjective and objective task credentials John Johansen
  • Re: [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants Casey Schaufler
  • Re: [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants Paul Moore
  • Re: [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants Casey Schaufler
  • Re: [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants Mimi Zohar
  • Re: [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants Paul Moore
  • Re: [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants Paul Moore
  • Re: [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants Casey Schaufler
  • Re: [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants Paul Moore
• security_task_getsecid() and subjective vs objective task creds Paul Moore
  • Re: security_task_getsecid() and subjective vs objective task creds Casey Schaufler
  • Re: security_task_getsecid() and subjective vs objective task creds Paul Moore
  • Re: security_task_getsecid() and subjective vs objective task creds Casey Schaufler
  • Re: security_task_getsecid() and subjective vs objective task creds Steve Grubb
  • Re: security_task_getsecid() and subjective vs objective task creds James Morris
  • Re: security_task_getsecid() and subjective vs objective task creds Paul Moore
• [GIT PULL] Audit patches for v5.12 Paul Moore
  • Re: [GIT PULL] Audit patches for v5.12 pr-tracker-bot
• audit 3.0.1 released Steve Grubb
• Re: [PATCH ghak124 v3] audit: log nftables configuration change events Paul Moore
  • Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
  • Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
  • Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
  • Re: [PATCH ghak124 v3] audit: log nftables configuration change events Florian Westphal
  • Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
  • Re: [PATCH ghak124 v3] audit: log nftables configuration change events Florian Westphal
  • Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
  • Re: [PATCH ghak124 v3] audit: log nftables configuration change events Florian Westphal
  • Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
  • Re: [PATCH ghak124 v3] audit: log nftables configuration change events Florian Westphal
  • Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
  • Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
  • Re: [PATCH ghak124 v3] audit: log nftables configuration change events Steve Grubb
  • Re: [PATCH ghak124 v3] audit: log nftables configuration change events Richard Guy Briggs
• Re: Samba and AuditD Steve Grubb
  • Re: Samba and AuditD Steve Grubb
• Auditd statsd integration Steve Grubb
  • Re: Auditd statsd integration LC Bruzenak
  • Re: Auditd statsd integration LC Bruzenak
  • Re: Auditd statsd integration Steve Grubb
• [ANNOUNCE][CFP] Linux Security Summit 2021 James Morris
  • Re: [ANNOUNCE][CFP] Linux Security Summit 2021 James Morris
  • Re: [ANNOUNCE][CFP] Linux Security Summit 2021 James Morris
  • Re: [ANNOUNCE][CFP] Linux Security Summit 2021 James Morris
• [PATCH 2/2] audit: show (grand)parents information of an audit context Daniel Walker
  • Re: [PATCH 2/2] audit: show (grand)parents information of an audit context Paul Moore
  • Re: [PATCH 2/2] audit: show (grand)parents information of an audit context Phil Zhang (xuanyzha)
  • Re: [PATCH 2/2] audit: show (grand)parents information of an audit context Daniel Walker (danielwa)
  • Re: [PATCH 2/2] audit: show (grand)parents information of an audit context Phil Zhang (xuanyzha)
  • Re: [PATCH 2/2] audit: show (grand)parents information of an audit context kernel test robot
• [PATCH 1/2] audit: show user land backtrace as part of audit context messages Daniel Walker
  • Re: [PATCH 1/2] audit: show user land backtrace as part of audit context messages Paul Moore
  • Re: [PATCH 1/2] audit: show user land backtrace as part of audit context messages Daniel Walker (danielwa)
  • Re: [PATCH 1/2] audit: show user land backtrace as part of audit context messages Paul Moore
  • Re: [PATCH 1/2] audit: show user land backtrace as part of audit context messages Ondrej Mosnacek
• [PATCH v2] audit: Make audit_filter_syscall() return void menglong8 . dong
  • Re: [PATCH v2] audit: Make audit_filter_syscall() return void Paul Moore
• [PATCH] audit: Make audit_filter_syscall() return void menglong8 . dong
  • Re: [PATCH] audit: Make audit_filter_syscall() return void Richard Guy Briggs
• [PATCH v24 00/25] LSM: Module stacking for AppArmor Casey Schaufler
  • [PATCH v24 01/25] LSM: Infrastructure management of the sock security Casey Schaufler
  • [PATCH v24 03/25] LSM: provide lsm name and id slot mappings Casey Schaufler
  • [PATCH v24 05/25] LSM: Use lsmblob in security_audit_rule_match Casey Schaufler
  • [PATCH v24 02/25] LSM: Add the lsmblob data structure. Casey Schaufler
  • [PATCH v24 04/25] IMA: avoid label collisions with stacked LSMs Casey Schaufler
  • Re: [PATCH v24 04/25] IMA: avoid label collisions with stacked LSMs Casey Schaufler
  • Re: [PATCH v24 04/25] IMA: avoid label collisions with stacked LSMs Casey Schaufler
  • Re: [PATCH v24 04/25] IMA: avoid label collisions with stacked LSMs Mimi Zohar
  • [PATCH v24 06/25] LSM: Use lsmblob in security_kernel_act_as Casey Schaufler
  • [PATCH v24 07/25] LSM: Use lsmblob in security_secctx_to_secid Casey Schaufler
  • [PATCH v24 08/25] LSM: Use lsmblob in security_secid_to_secctx Casey Schaufler
  • [PATCH v24 09/25] LSM: Use lsmblob in security_ipc_getsecid Casey Schaufler
  • [PATCH v24 10/25] LSM: Use lsmblob in security_task_getsecid Casey Schaufler
  • [PATCH v24 11/25] LSM: Use lsmblob in security_inode_getsecid Casey Schaufler
  • [PATCH v24 12/25] LSM: Use lsmblob in security_cred_getsecid Casey Schaufler
  • [PATCH v24 13/25] IMA: Change internal interfaces to use lsmblobs Casey Schaufler
  • [PATCH v24 14/25] LSM: Specify which LSM to display Casey Schaufler
  • [PATCH v24 15/25] LSM: Ensure the correct LSM context releaser Casey Schaufler
  • [PATCH v24 17/25] LSM: Use lsmcontext in security_inode_getsecctx Casey Schaufler
  • [PATCH v24 19/25] NET: Store LSM netlabel data in a lsmblob Casey Schaufler
  • [PATCH v24 16/25] LSM: Use lsmcontext in security_secid_to_secctx Casey Schaufler
  • [PATCH v24 18/25] LSM: security_secid_to_secctx in netlink netfilter Casey Schaufler
  • [PATCH v24 20/25] LSM: Verify LSM display sanity in binder Casey Schaufler
  • [PATCH v24 21/25] audit: add support for non-syscall auxiliary records Casey Schaufler
  • Re: [PATCH v24 21/25] audit: add support for non-syscall auxiliary records Richard Guy Briggs
  • Re: [PATCH v24 21/25] audit: add support for non-syscall auxiliary records Casey Schaufler
  • Re: [PATCH v24 21/25] audit: add support for non-syscall auxiliary records Paul Moore
  • Re: [PATCH v24 21/25] audit: add support for non-syscall auxiliary records Richard Guy Briggs
  • [PATCH v24 22/25] Audit: Add new record for multiple process LSM attributes Casey Schaufler
  • [PATCH v24 23/25] Audit: Add a new record for multiple object LSM attributes Casey Schaufler
  • [PATCH v24 24/25] LSM: Add /proc attr entry for full LSM context Casey Schaufler
  • [PATCH v24 25/25] AppArmor: Remove the exclusive flag Casey Schaufler
  • Re: [PATCH v24 00/25] LSM: Module stacking for AppArmor Topi Miettinen
  • Re: [PATCH v24 00/25] LSM: Module stacking for AppArmor Casey Schaufler
  • Re: [PATCH v24 00/25] LSM: Module stacking for AppArmor Topi Miettinen
  • Re: [PATCH v24 00/25] LSM: Module stacking for AppArmor Casey Schaufler
• [RFC,v3,1/1] audit: speed up syscall rule filtering yang.yang29
  • Re: [RFC,v3,1/1] audit: speed up syscall rule filtering Paul Moore
  • Fw:Re:[RFC,v3,1/1] audit: speed up syscall rule filtering yang.yang29
• [RFC PATCH] audit.spec: create audit group for log read access Enzo Matsumiya
• [RFC,v2,1/1] audit: speed up syscall rule match while exiting syscall yang.yang29
  • Re: [RFC, v2, 1/1] audit: speed up syscall rule match while exiting syscall Paul Moore
• Probable bug in auditd Shourya Jaiswal
  • Re: Probable bug in auditd Steve Grubb
• [RFC] audit.spec: create audit group for log read access Enzo Matsumiya
  • Re: [RFC] audit.spec: create audit group for log read access Steve Grubb
  • Re: [RFC] audit.spec: create audit group for log read access Enzo Matsumiya
  • Re: [RFC] audit.spec: create audit group for log read access Steve Grubb
• 2nd Round AuditRules Questions Joe Wulf
  • Re: 2nd Round AuditRules Questions Steve Grubb
• AuditRule Questions Joe Wulf
  • Re: AuditRule Questions Steve Grubb
  • Re: AuditRule Questions Joe Wulf
  • Re: AuditRule Questions Steve Grubb
• Possible typo in 22-ignore-chrony.rules Joe Wulf
  • Re: Possible typo in 22-ignore-chrony.rules Steve Grubb
• [PATCH] audit: Remove leftover reference to the audit_tasklet Davidlohr Bueso
  • Re: [PATCH] audit: Remove leftover reference to the audit_tasklet Paul Moore
• [RFC,v1,1/1] audit: speed up syscall rule match while exiting syscall yang.yang29
  • Re: [RFC, v1, 1/1] audit: speed up syscall rule match while exiting syscall Paul Moore
  • Fw:Re:[RFC,v1,1/1] audit: speed up syscall rule match while exiting syscall yang.yang29
  • Re: Fw:Re:[RFC,v1,1/1] audit: speed up syscall rule match while exiting syscall Paul Moore
  • Fw:Re:Fw:Re:[RFC,v1,1/1] audit: speed up syscall rule match while exiting syscall yang.yang29
  • Re: Fw:Re:Fw:Re:[RFC, v1, 1/1] audit: speed up syscall rule match while exiting syscall Paul Moore
  • Fw:Re:Fw:Re:Fw:Re:[RFC,v1,1/1] audit: speed up syscall rule match while exiting syscall yang.yang29
• [PATCH ghak90 v11 00/11] audit: implement container identifier Richard Guy Briggs
  • [PATCH ghak90 v11 01/11] audit: collect audit task parameters Richard Guy Briggs
  • [PATCH ghak90 v11 02/11] audit: add container id Richard Guy Briggs
  • [PATCH ghak90 v11 03/11] audit: log container info of syscalls Richard Guy Briggs
  • [PATCH ghak90 v11 04/11] audit: add contid support for signalling the audit daemon Richard Guy Briggs
  • [PATCH ghak90 v11 05/11] audit: add support for non-syscall auxiliary records Richard Guy Briggs
  • [PATCH ghak90 v11 06/11] audit: add containerid support for user records Richard Guy Briggs
  • [PATCH ghak90 v11 07/11] audit: add containerid filtering Richard Guy Briggs
  • [PATCH ghak90 v11 09/11] audit: contid check descendancy and nesting Richard Guy Briggs
  • [PATCH ghak90 v11 10/11] audit: track container nesting Richard Guy Briggs
  • [PATCH ghak90 v11 11/11] audit: add capcontid to set contid outside init_user_ns Richard Guy Briggs
  • [PATCH ghak90 v11 08/11] audit: add support for containerid to network namespaces Richard Guy Briggs
• Occasional delayed output of events Burn Alting
  • Re: Occasional delayed output of events Steve Grubb
  • Re: Occasional delayed output of events Burn Alting
  • Re: Occasional delayed output of events Steve Grubb
  • Re: Occasional delayed output of events Burn Alting
  • Re: Occasional delayed output of events Burn Alting
  • Re: Occasional delayed output of events Burn Alting
  • Re: Occasional delayed output of events Richard Guy Briggs
  • Re: Occasional delayed output of events Burn Alting
  • Re: Occasional delayed output of events Paul Moore
  • Re: Occasional delayed output of events Steve Grubb
  • Re: Occasional delayed output of events Paul Moore
  • Re: Occasional delayed output of events Steve Grubb
  • Re: Occasional delayed output of events Burn Alting
  • Re: Occasional delayed output of events Paul Moore
  • Re: Occasional delayed output of events Burn Alting
  • Re: Occasional delayed output of events Lenny Bruzenak
  • Re: Occasional delayed output of events Paul Moore
  • Re: Occasional delayed output of events Burn Alting
  • Re: Occasional delayed output of events Paul Moore
  • Re: Occasional delayed output of events Steve Grubb
  • Re: Occasional delayed output of events Burn Alting
  • Re: Occasional delayed output of events Paul Moore
  • Re: Occasional delayed output of events Burn Alting
  • Re: Occasional delayed output of events Steve Grubb
  • Re: Occasional delayed output of events Burn Alting
  • Re: Occasional delayed output of events Steve Grubb
  • Re: Occasional delayed output of events Burn Alting
  • Re: Occasional delayed output of events Burn Alting
  • Re: Occasional delayed output of events Steve Grubb
  • Re: Occasional delayed output of events Burn Alting
  • Re: Occasional delayed output of events Richard Guy Briggs
• [PATCH ghau51/ghau40 v10 00/11] add support for audit container identifier Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 02/11] AUDIT_CONTAINER_ID message type basic support Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 01/11] AUDIT_CONTAINER_OP message type basic support Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 04/11] add ausearch containerid support Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 05/11] start normalization containerid support Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 06/11] libaudit: add support to get the task audit container identifier Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 09/11] contid: interpret correctly CONTAINER_ID contid field csv Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 08/11] add support for audit_signal_info2 Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 07/11] signal_info: only print context if it is available. Richard Guy Briggs

• Earlier messages
• Later messages