Re: libauparse exporting clear_config()

2014-04-11 Thread Laurent Bigonville
Le Thu, 10 Apr 2014 07:25:42 -0400, Steve Grubb sgr...@redhat.com a écrit : On Thursday, April 10, 2014 09:06:11 AM Laurent Bigonville wrote: With 2.3.5, libauparse is exporting a new symbol (clear_config()) It seems that all the other symbols are prefixed with either auparse_ or

Re: [PATCH] MIPS: use current instead of task in syscall_get_arch

2014-04-11 Thread Markos Chandras
On 04/11/2014 03:43 AM, Richard Guy Briggs wrote: On 14/04/10, Eric Paris wrote: In commit 6e345746 Markos started using task to determine 64bit vs 32bit instead of it being completely CONFIG based. In commit 5e937a9a we dropped the 'task' argument to syscall_get_arch() across the entire

Re: libauparse exporting clear_config()

2014-04-11 Thread Steve Grubb
On Friday, April 11, 2014 08:54:37 AM Laurent Bigonville wrote: Le Thu, 10 Apr 2014 07:25:42 -0400, Steve Grubb sgr...@redhat.com a écrit : On Thursday, April 10, 2014 09:06:11 AM Laurent Bigonville wrote: With 2.3.5, libauparse is exporting a new symbol (clear_config()) It seems

Re: Repository of audit events

2014-04-11 Thread Steve Grubb
Hi Mimi, On Thursday, April 10, 2014 11:36:15 PM Mimi Zohar wrote: On Wed, 2014-04-09 at 18:26 -0700, Peter Moody wrote: On Wed, Apr 09 2014 at 10:19, Steve Grubb wrote: Missing INTEGRITY_RULE IMA with an 'audit' rule generates INTEGRITY_RULE messages. For those of us not really up on

Re: Repository of audit events

2014-04-11 Thread Mimi Zohar
On Fri, 2014-04-11 at 10:07 -0400, Steve Grubb wrote: Hi Mimi, On Thursday, April 10, 2014 11:36:15 PM Mimi Zohar wrote: On Wed, 2014-04-09 at 18:26 -0700, Peter Moody wrote: On Wed, Apr 09 2014 at 10:19, Steve Grubb wrote: Missing INTEGRITY_RULE IMA with an 'audit' rule

audit 2.3.6 released

2014-04-11 Thread Steve Grubb
I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit. It will also be in rawhide soon. The ChangeLog is: - Add an option to auditctl to interpret a0 - a3 of syscall rules when listing - Improve ARM and AARCH64 support (AKASHI

Re: [PATCH_v8 0/2] arm64: Add audit support

2014-04-11 Thread Don Dutile
On 03/15/2014 01:49 AM, AKASHI Takahiro wrote: (Please apply this patch after my ftrace patch to resolve some conflict on arm64/kernel/ptrace.c, functionally it doesn't depend on ftrace though) This patchset adds system call audit support on arm64. Both 32-bit (AUDIT_ARCH_ARM) and 64-bit tasks