linux-audit  

Messages by Thread

• • Re: [RFC PATCH v2 20/31] kvx: Add memory management Mike Rapoport
  • [RFC PATCH v2 05/31] Documentation: Add binding for kalray,coolidge-itgen Yann Sionneau
  • Re: [RFC PATCH v2 05/31] Documentation: Add binding for kalray,coolidge-itgen Krzysztof Kozlowski
  • [RFC PATCH v2 15/31] irqchip: Add irq-kvx-apic-gic driver Yann Sionneau
• [PATCH v6 0/3] fanotify: Allow user space to pass back additional audit info Richard Guy Briggs
  • [PATCH v6 1/3] fanotify: Ensure consistent variable type for response Richard Guy Briggs
  • [PATCH v6 3/3] fanotify, audit: Allow audit to use the full permission event response Richard Guy Briggs
  • Re: [PATCH v6 3/3] fanotify, audit: Allow audit to use the full permission event response Steve Grubb
  • Re: [PATCH v6 3/3] fanotify,audit: Allow audit to use the full permission event response Paul Moore
  • Re: [PATCH v6 3/3] fanotify,audit: Allow audit to use the full permission event response Richard Guy Briggs
  • Re: [PATCH v6 3/3] fanotify,audit: Allow audit to use the full permission event response Paul Moore
  • Re: [PATCH v6 3/3] fanotify, audit: Allow audit to use the full permission event response Steve Grubb
  • Re: [PATCH v6 3/3] fanotify,audit: Allow audit to use the full permission event response Paul Moore
  • Re: [PATCH v6 3/3] fanotify,audit: Allow audit to use the full permission event response Richard Guy Briggs
  • Re: [PATCH v6 3/3] fanotify,audit: Allow audit to use the full permission event response Paul Moore
  • [PATCH v6 2/3] fanotify: define struct members to hold response decision context Richard Guy Briggs
  • Re: [PATCH v6 0/3] fanotify: Allow user space to pass back additional audit info Jan Kara
• Difference between BITMAP_EXECUTABLE_PATH and BITMAP_EXCLUDE_EXTEND flags Avtansh Gupta
  • Re: Difference between BITMAP_EXECUTABLE_PATH and BITMAP_EXCLUDE_EXTEND flags Steve Grubb
• audit rules to help watch for potential threat? Wieprecht, Karen M.
  • Re: audit rules to help watch for potential threat? Burn Alting
• Identify whether the kernel version supports Path based exclusion Anurag Aggarwal
  • Re: Identify whether the kernel version supports Path based exclusion Casey Schaufler
  • Re: Identify whether the kernel version supports Path based exclusion Steve Grubb
• A question on monitoring time or time management changes in the kernel and the adjtimex system call Burn Alting
  • Re: A question on monitoring time or time management changes in the kernel and the adjtimex system call Paul Moore
  • Re: A question on monitoring time or time management changes in the kernel and the adjtimex system call Steve Grubb
• [PATCH v3 1/2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Paul Moore
  • [PATCH v3 2/2] bpf: remove the do_idr_lock parameter from bpf_prog_free_id() Paul Moore
  • Re: [PATCH v3 2/2] bpf: remove the do_idr_lock parameter from bpf_prog_free_id() Stanislav Fomichev
  • Re: [PATCH v3 2/2] bpf: remove the do_idr_lock parameter from bpf_prog_free_id() Paul Moore
  • Re: [PATCH v3 2/2] bpf: remove the do_idr_lock parameter from bpf_prog_free_id() sdf
  • Re: [PATCH v3 2/2] bpf: remove the do_idr_lock parameter from bpf_prog_free_id() Paul Moore
  • Re: [PATCH v3 1/2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Stanislav Fomichev
  • Re: [PATCH v3 1/2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Paul Moore
  • Re: [PATCH v3 1/2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD sdf
  • Re: [PATCH v3 1/2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD patchwork-bot+netdevbpf
  • Re: [PATCH v3 1/2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Jiri Olsa
  • Re: [PATCH v3 1/2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Paul Moore
• New bug in Audit Ariel Silver
  • Re: New bug in Audit Paul Moore
  • Re: New bug in Audit Steve Grubb
  • Re: New bug in Audit Paul Moore
  • Re: New bug in Audit Paul Moore
  • Re: New bug in Audit Ariel Silver
  • Re: New bug in Audit Paul Moore
  • Re: New bug in Audit Steve Grubb
  • Re: New bug in Audit Paul Moore
  • Re: New bug in Audit Richard Guy Briggs
• [RFC PATCH 00/25] Upstream kvx Linux port Yann Sionneau
  • [RFC PATCH 02/25] kvx: Add ELF-related definitions Yann Sionneau
  • Re: [RFC PATCH 02/25] kvx: Add ELF-related definitions Eric W. Biederman
  • Re: [RFC PATCH 02/25] kvx: Add ELF-related definitions Yann Sionneau
  • Re: [RFC PATCH 00/25] Upstream kvx Linux port Rob Herring
  • Re: [RFC PATCH 00/25] Upstream kvx Linux port Arnd Bergmann
  • Re: [RFC PATCH 00/25] Upstream kvx Linux port Jules Maselbas
  • Re: [RFC PATCH 00/25] Upstream kvx Linux port Arnd Bergmann
  • Re: [RFC PATCH 00/25] Upstream kvx Linux port Steven Rostedt
  • Re: [RFC PATCH 00/25] Upstream kvx Linux port Jeff Xie
  • Re: [RFC PATCH 00/25] Upstream kvx Linux port Yann Sionneau
  • Re: [RFC PATCH 00/25] Upstream kvx Linux port Jeff Xie
  • Re: [RFC PATCH 00/25] Upstream kvx Linux port Jeff Xie
• [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Paul Moore
  • Re: [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Paul Moore
  • Re: [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Stanislav Fomichev
  • Re: [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Paul Moore
  • Re: [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Alexei Starovoitov
  • Re: [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Stanislav Fomichev
  • Re: [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Paul Moore
  • Re: [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Stanislav Fomichev
  • Re: [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Alexei Starovoitov
  • Re: [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Stanislav Fomichev
  • Re: [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Alexei Starovoitov
  • Re: [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Alexei Starovoitov
  • Re: [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Stanislav Fomichev
  • Re: [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD kernel test robot
  • Re: [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Jiri Olsa
  • Re: [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD Paul Moore
• [PATCH] bpf: restore the ebpf audit UNLOAD id field Paul Moore
  • Re: [PATCH] bpf: restore the ebpf audit UNLOAD id field sdf
  • Re: [PATCH] bpf: restore the ebpf audit UNLOAD id field Paul Moore
  • Re: [PATCH] bpf: restore the ebpf audit UNLOAD id field sdf
  • Re: [PATCH] bpf: restore the ebpf audit UNLOAD id field Paul Moore
  • Re: [PATCH] bpf: restore the ebpf audit UNLOAD id field Paul Moore
  • Re: [PATCH] bpf: restore the ebpf audit UNLOAD id field Stanislav Fomichev
  • Re: [PATCH] bpf: restore the ebpf audit UNLOAD id field Paul Moore
  • Re: [PATCH] bpf: restore the ebpf audit UNLOAD id field Jiri Olsa
  • Re: [PATCH] bpf: restore the ebpf audit UNLOAD id field Paul Moore
  • Re: [PATCH] bpf: restore the ebpf audit UNLOAD id field Paul Moore
  • Re: [PATCH] bpf: restore the ebpf audit UNLOAD id field Jiri Olsa
• BPF audit logs Burn Alting
  • Re: BPF audit logs Steve Grubb
  • Re: BPF audit logs Burn Alting
  • Re: BPF audit logs Paul Moore
  • Re: BPF audit logs Paul Moore
  • Re: BPF audit logs Burn Alting
  • Re: BPF audit logs Paul Moore
  • Re: BPF audit logs Burn Alting
• [PATCH RESEND 0/2] Provide matching audit timestamp in the SELinux AVC trace event Ondrej Mosnacek
  • [PATCH RESEND 2/2] selinux: provide matching audit timestamp in the AVC trace event Ondrej Mosnacek
  • Re: [PATCH RESEND 2/2] selinux: provide matching audit timestamp in the AVC trace event Paul Moore
  • [PATCH RESEND 1/2] audit: introduce a struct to represent an audit timestamp Ondrej Mosnacek
• [PATCH 0/2] Provide matching audit timestamp in the SELinux AVC trace event Ondrej Mosnacek
  • [PATCH 1/2] audit: introduce a struct to represent an audit timestamp Ondrej Mosnacek
  • Re: [PATCH 1/2] audit: introduce a struct to represent an audit timestamp Casey Schaufler
  • Re: [PATCH 1/2] audit: introduce a struct to represent an audit timestamp Paul Moore
• [GIT PULL] Audit patches for v6.2 Paul Moore
  • Re: [GIT PULL] Audit patches for v6.2 pr-tracker-bot
• [PATCH v5 0/3] fanotify: Allow user space to pass back additional audit info Richard Guy Briggs
  • [PATCH v5 1/3] fanotify: Ensure consistent variable type for response Richard Guy Briggs
  • Re: [PATCH v5 1/3] fanotify: Ensure consistent variable type for response Paul Moore
  • [PATCH v5 2/3] fanotify: define struct members to hold response decision context Richard Guy Briggs
  • Re: [PATCH v5 2/3] fanotify: define struct members to hold response decision context Jan Kara
  • Re: [PATCH v5 2/3] fanotify: define struct members to hold response decision context Paul Moore
  • Re: [PATCH v5 2/3] fanotify: define struct members to hold response decision context Jan Kara
  • Re: [PATCH v5 2/3] fanotify: define struct members to hold response decision context Richard Guy Briggs
  • Re: [PATCH v5 2/3] fanotify: define struct members to hold response decision context Jan Kara
  • Re: [PATCH v5 2/3] fanotify: define struct members to hold response decision context Richard Guy Briggs
  • Re: [PATCH v5 2/3] fanotify: define struct members to hold response decision context Jan Kara
  • Re: [PATCH v5 2/3] fanotify: define struct members to hold response decision context Richard Guy Briggs
  • [PATCH v5 3/3] fanotify, audit: Allow audit to use the full permission event response Richard Guy Briggs
  • Re: [PATCH v5 3/3] fanotify,audit: Allow audit to use the full permission event response Paul Moore
  • Re: [PATCH v5 3/3] fanotify,audit: Allow audit to use the full permission event response Richard Guy Briggs
  • Re: [PATCH v5 3/3] fanotify,audit: Allow audit to use the full permission event response Paul Moore
  • Re: [PATCH v5 3/3] fanotify, audit: Allow audit to use the full permission event response Steve Grubb
  • Re: [PATCH v5 3/3] fanotify,audit: Allow audit to use the full permission event response Richard Guy Briggs
  • Re: [PATCH v5 3/3] fanotify, audit: Allow audit to use the full permission event response Steve Grubb
  • Re: [PATCH v5 3/3] fanotify, audit: Allow audit to use the full permission event response Richard Guy Briggs
• [PATCH AUTOSEL 4.9 2/4] audit: fix undefined behavior in bit shift for AUDIT_BIT Sasha Levin
• [PATCH AUTOSEL 4.19 2/8] audit: fix undefined behavior in bit shift for AUDIT_BIT Sasha Levin
• [PATCH AUTOSEL 6.0 06/44] audit: fix undefined behavior in bit shift for AUDIT_BIT Sasha Levin
• [PATCH AUTOSEL 4.14 2/6] audit: fix undefined behavior in bit shift for AUDIT_BIT Sasha Levin
• [PATCH AUTOSEL 5.4 03/11] audit: fix undefined behavior in bit shift for AUDIT_BIT Sasha Levin
• [PATCH AUTOSEL 5.10 04/18] audit: fix undefined behavior in bit shift for AUDIT_BIT Sasha Levin
• [PATCH AUTOSEL 5.15 04/27] audit: fix undefined behavior in bit shift for AUDIT_BIT Sasha Levin
• Re: [PATCH v1 4/8] LSM: Maintain a table of LSM attribute data Paul Moore
• [GIT PULL] Audit fixes for v6.1 (#1) Paul Moore
  • Re: [GIT PULL] Audit fixes for v6.1 (#1) pr-tracker-bot
• Re: [PATCH] audit: fix undefined behavior in bit shift for AUDIT_BIT Paul Moore
  • Re: [PATCH] audit: fix undefined behavior in bit shift for AUDIT_BIT cuigaosheng
  • Re: [PATCH] audit: fix undefined behavior in bit shift for AUDIT_BIT Paul Moore
  • Re: [PATCH] audit: fix undefined behavior in bit shift for AUDIT_BIT Richard Guy Briggs
• [PATCH] Properly pass struct timeval.tv_sec to snprintf under -D_TIME_BITS=64 gkabe
• IORING_OP_SENDMSG_ZC should enable auditing just like IORING_OP_SENDMSG Paul Moore
  • Re: IORING_OP_SENDMSG_ZC should enable auditing just like IORING_OP_SENDMSG Jens Axboe
• [GIT PULL] Audit patches for v6.1 Paul Moore
  • Re: [GIT PULL] Audit patches for v6.1 pr-tracker-bot
• [PATCH 0/3] improve audit syscall-exit latency Ankur Arora
  • [PATCH 3/3] audit: unify audit_filter_{uring(), inode_name(), syscall()} Ankur Arora
  • Re: [PATCH 3/3] audit: unify audit_filter_{uring(), inode_name(), syscall()} Paul Moore
  • Re: [PATCH 3/3] audit: unify audit_filter_{uring(),inode_name(),syscall()} Ankur Arora
  • [PATCH v2] audit: unify audit_filter_{uring(), inode_name(), syscall()} Ankur Arora
  • Re: [PATCH v2] audit: unify audit_filter_{uring(), inode_name(), syscall()} Paul Moore
  • Re: [PATCH v2] audit: unify audit_filter_{uring(),inode_name(),syscall()} Ankur Arora
  • Re: [PATCH v2] audit: unify audit_filter_{uring(), inode_name(), syscall()} Paul Moore
  • [PATCH 2/3] audit: annotate branch direction for audit_in_mask() Ankur Arora
  • Re: [PATCH 2/3] audit: annotate branch direction for audit_in_mask() Paul Moore
  • Re: [PATCH 2/3] audit: annotate branch direction for audit_in_mask() Ankur Arora
  • Re: [PATCH 2/3] audit: annotate branch direction for audit_in_mask() Paul Moore
  • Re: [PATCH 2/3] audit: annotate branch direction for audit_in_mask() Ankur Arora
  • [PATCH 1/3] audit: cache ctx->major in audit_filter_syscall() Ankur Arora
  • Re: [PATCH 1/3] audit: cache ctx->major in audit_filter_syscall() Paul Moore
  • Re: [PATCH 1/3] audit: cache ctx->major in audit_filter_syscall() Ankur Arora
  • Re: [PATCH 1/3] audit: cache ctx->major in audit_filter_syscall() Paul Moore
  • Re: [PATCH 1/3] audit: cache ctx->major in audit_filter_syscall() Steve Grubb
  • Re: [PATCH 1/3] audit: cache ctx->major in audit_filter_syscall() Paul Moore
  • Re: [PATCH 1/3] audit: cache ctx->major in audit_filter_syscall() Ankur Arora
• [PATCH v38 00/39] LSM: Module stacking for AppArmor Casey Schaufler
  • [PATCH v38 02/39] LSM: Add an LSM identifier for external use Casey Schaufler
  • Re: [PATCH v38 02/39] LSM: Add an LSM identifier for external use Mickaël Salaün
  • Re: [PATCH v38 02/39] LSM: Add an LSM identifier for external use Casey Schaufler
  • Re: [PATCH v38 02/39] LSM: Add an LSM identifier for external use Georgia Garcia
  • [PATCH v38 01/39] LSM: Identify modules by more than name Casey Schaufler
  • Re: [PATCH v38 01/39] LSM: Identify modules by more than name Mickaël Salaün
  • Re: [PATCH v38 01/39] LSM: Identify modules by more than name Georgia Garcia
  • Re: [PATCH v38 01/39] LSM: Identify modules by more than name Casey Schaufler
  • [PATCH v38 03/39] LSM: Identify the process attributes for each module Casey Schaufler
  • [PATCH v38 04/39] LSM: Maintain a table of LSM attribute data Casey Schaufler
  • Re: [PATCH v38 04/39] LSM: Maintain a table of LSM attribute data Tetsuo Handa
  • Re: [PATCH v38 04/39] LSM: Maintain a table of LSM attribute data Casey Schaufler
  • Re: [PATCH v38 04/39] LSM: Maintain a table of LSM attribute data Tetsuo Handa
  • Re: [PATCH v38 04/39] LSM: Maintain a table of LSM attribute data Tetsuo Handa
  • Re: [PATCH v38 04/39] LSM: Maintain a table of LSM attribute data Casey Schaufler
  • Re: [PATCH v38 04/39] LSM: Maintain a table of LSM attribute data Casey Schaufler
  • Re: [PATCH v38 04/39] LSM: Maintain a table of LSM attribute data Tetsuo Handa
  • Re: [PATCH v38 04/39] LSM: Maintain a table of LSM attribute data Casey Schaufler
  • Re: [PATCH v38 04/39] LSM: Maintain a table of LSM attribute data Tetsuo Handa
  • [PATCH v38 05/39] proc: Use lsmids instead of lsm names for attrs Casey Schaufler
  • [PATCH v38 07/39] integrity: disassociate ima_filter_rule from security_audit_rule Casey Schaufler
  • [PATCH v38 06/39] LSM: lsm_self_attr syscall for LSM self attributes Casey Schaufler
  • Re: [PATCH v38 06/39] LSM: lsm_self_attr syscall for LSM self attributes kernel test robot
  • Re: [PATCH v38 06/39] LSM: lsm_self_attr syscall for LSM self attributes Mickaël Salaün
  • Re: [PATCH v38 06/39] LSM: lsm_self_attr syscall for LSM self attributes Paul Moore
  • Re: [PATCH v38 06/39] LSM: lsm_self_attr syscall for LSM self attributes Casey Schaufler
  • [PATCH v38 08/39] LSM: Infrastructure management of the sock security Casey Schaufler
  • Re: [PATCH v38 08/39] LSM: Infrastructure management of the sock security Mickaël Salaün
  • [PATCH v38 09/39] LSM: Add the lsmblob data structure. Casey Schaufler
  • Re: [PATCH v38 09/39] LSM: Add the lsmblob data structure. Mickaël Salaün
  • [PATCH v38 10/39] LSM: provide lsm name and id slot mappings Casey Schaufler
  • [PATCH v38 11/39] IMA: avoid label collisions with stacked LSMs Casey Schaufler

• Earlier messages
• Later messages