Re: Audit roadmap and new development

2018-03-11 Thread Steve Grubb
On Sun, 11 Mar 2018 17:44:39 + F Rafi wrote: > So container support can be addressed by userspace changes alone Nope. > Or will it require kernel audit subsystem updates as well? The kernel does all the heavy lifting. What this is indicating is that user space will

Re: Audit roadmap and new development

2018-03-11 Thread Paul Moore
On Sun, Mar 11, 2018 at 1:44 PM, F Rafi wrote: > So container support can be addressed by userspace changes alone Or will it > require kernel audit subsystem updates as well? In order to associate container identifiers with kernel generated audit events, kernel changes are

Re: Audit roadmap and new development

2018-03-11 Thread F Rafi
So container support can be addressed by userspace changes alone Or will it require kernel audit subsystem updates as well? Thanks Farhan On Sun, Mar 11, 2018 at 1:08 PM Paul Moore wrote: > On Sun, Mar 11, 2018 at 5:38 AM, Steve Grubb wrote: > > Hello,

Re: Audit roadmap and new development

2018-03-11 Thread Paul Moore
On Sun, Mar 11, 2018 at 5:38 AM, Steve Grubb wrote: > Hello, > > I wanted to take a few minutes to chat about the future audit roadmap. > The release of audit-2.8.3 represents a breaking point ... Just a quick note that Steve is talking about the audit userspace which he