Re: [PATCH 2/8] integrity: IMA as an integrity service provider

2009-02-09 Thread Steve Grubb
On Sunday 08 February 2009 09:42:42 pm Mimi Zohar wrote: diff --git a/security/integrity/ima/ima_audit.c b/security/integrity/ima/ima_audit.c new file mode 100644 index 000..8a0f1e2 --- /dev/null +++ b/security/integrity/ima/ima_audit.c +void integrity_audit_msg(int

audit-viewer event file question

2009-02-09 Thread LC Bruzenak
Is there a way to specify on the command line a way to tell the audit-viewer to read a specific raw event file? Thx, LCB. -- LC (Lenny) Bruzenak le...@magitekltd.com -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit

Re: audit-viewer event file question

2009-02-09 Thread Miloslav Trmac
Hello, - LC Bruzenak le...@magitekltd.com wrote: Is there a way to specify on the command line a way to tell the audit-viewer to read a specific raw event file? No. Mirek -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit

Re: [PATCH 2/8] integrity: IMA as an integrity service provider

2009-02-09 Thread Mimi Zohar
On Mon, 2009-02-09 at 09:51 -0500, Steve Grubb wrote: On Sunday 08 February 2009 09:42:42 pm Mimi Zohar wrote: diff --git a/security/integrity/ima/ima_audit.c b/security/integrity/ima/ima_audit.c new file mode 100644 index 000..8a0f1e2 --- /dev/null +++

[PATCH] integrity: audit update

2009-02-09 Thread Mimi Zohar
- Force audit result to be either 0 or 1. - make template names const - Add new stand-alone message type: AUDIT_INTEGRITY_RULE Signed-off-by: Mimi Zohar zo...@us.ibm.com --- diff --git a/include/linux/audit.h b/include/linux/audit.h index 930939a..4fa2810 100644 --- a/include/linux/audit.h +++