Re: Audit roadmap and new development

2018-03-11 Thread Paul Moore
On Sun, Mar 11, 2018 at 1:44 PM, F Rafi wrote: > So container support can be addressed by userspace changes alone Or will it > require kernel audit subsystem updates as well? In order to associate container identifiers with kernel generated audit events, kernel changes are

Re: Audit roadmap and new development

2018-03-11 Thread Steve Grubb
On Sun, 11 Mar 2018 17:44:39 + F Rafi wrote: > So container support can be addressed by userspace changes alone Nope. > Or will it require kernel audit subsystem updates as well? The kernel does all the heavy lifting. What this is indicating is that user space will

Re: Audit roadmap and new development

2018-03-11 Thread F Rafi
So container support can be addressed by userspace changes alone Or will it require kernel audit subsystem updates as well? Thanks Farhan On Sun, Mar 11, 2018 at 1:08 PM Paul Moore wrote: > On Sun, Mar 11, 2018 at 5:38 AM, Steve Grubb wrote: > > Hello,

Re: Audit roadmap and new development

2018-03-11 Thread Paul Moore
On Sun, Mar 11, 2018 at 5:38 AM, Steve Grubb wrote: > Hello, > > I wanted to take a few minutes to chat about the future audit roadmap. > The release of audit-2.8.3 represents a breaking point ... Just a quick note that Steve is talking about the audit userspace which he

Audit roadmap and new development

2018-03-11 Thread Steve Grubb
Hello, I wanted to take a few minutes to chat about the future audit roadmap. The release of audit-2.8.3 represents a breaking point. Its time for changes. Some of these changes are going to modify configuration files. And new things that may not be compatible with the old will be introduced. So,