On Thu, Aug 18, 2016 at 1:43 PM, Richard Guy Briggs <r...@redhat.com> wrote: > https://github.com/linux-audit/audit-kernel/wiki/RFE-Session-ID-User-Filter > RFE Session ID User Filter > > https://github.com/linux-audit/audit-kernel/issues/4 > RFE: add a session ID filter to the kernel's user filter > > See also the set of userspace suport patches: > Add support for sessionid user filters, sessionid_set and loginuid_set > https://www.redhat.com/archives/linux-audit/2016-August/msg00005.html > (userspace update expected to be posted 2016-08-18) > and the test case: > > https://github.com/rgbriggs/audit-testsuite/tree/ghak4-test-for-sessionID-user-filter > > This third patch is expected to have a merge conflict with: > "audit: add exclude filter extension to feature bitmap" > posted on 2016-08-18. > > Richard Guy Briggs (3): > audit: add support for session ID user filter > audit: add AUDIT_SESSIONID_SET support > audit: add sessionid filter extension to feature bitmap > > include/linux/audit.h | 10 ++++++++++ > include/uapi/linux/audit.h | 6 +++++- > kernel/auditfilter.c | 5 +++++ > kernel/auditsc.c | 6 ++++++ > 4 files changed, 26 insertions(+), 1 deletions(-)
I just combined and merged patches 1/3 and 3/3 into the audit#next branch, skipping the AUDIT_SESSIONID_SET patch as we already discussed on list. I included the patches into the next branch because the userspace support has already been merged, but if the session ID tests and wiki feature page aren't ready by the time the next merge window opens I'm going to drop them from the pull request I send Linus. -- paul moore www.paul-moore.com