Re: [PATCH v1 0/2] two suggested iouring op audit updates

2023-01-28 Thread Jens Axboe
On 1/27/23 3:53 PM, Paul Moore wrote: > On Fri, Jan 27, 2023 at 5:46 PM Jens Axboe wrote: >> On 1/27/23 3:38 PM, Paul Moore wrote: >>> On Fri, Jan 27, 2023 at 2:43 PM Jens Axboe wrote: On 1/27/23 12:42 PM, Paul Moore wrote: > On Fri, Jan 27, 2023 at 12:40 PM Jens Axboe wrote: >> On

Re: [PATCH v1 0/2] two suggested iouring op audit updates

2023-01-28 Thread Jens Axboe
On 1/27/23 3:38 PM, Paul Moore wrote: > On Fri, Jan 27, 2023 at 2:43 PM Jens Axboe wrote: >> On 1/27/23 12:42 PM, Paul Moore wrote: >>> On Fri, Jan 27, 2023 at 12:40 PM Jens Axboe wrote: On 1/27/23 10:23 AM, Richard Guy Briggs wrote: > A couple of updates to the iouring ops audit bypass

Re: [PATCH v1 1/2] io_uring,audit: audit IORING_OP_FADVISE but not IORING_OP_MADVISE

2023-01-28 Thread Jens Axboe
On 1/27/23 4:02 PM, Richard Guy Briggs wrote: > On 2023-01-27 15:45, Jens Axboe wrote: >> On 1/27/23 3:35?PM, Paul Moore wrote: >>> On Fri, Jan 27, 2023 at 12:24 PM Richard Guy Briggs wrote: Since FADVISE can truncate files and MADVISE operates on memory, reverse the audit_skip

Re: [PATCH v1 1/2] io_uring,audit: audit IORING_OP_FADVISE but not IORING_OP_MADVISE

2023-01-28 Thread Jens Axboe
On 1/27/23 3:35?PM, Paul Moore wrote: > On Fri, Jan 27, 2023 at 12:24 PM Richard Guy Briggs wrote: >> >> Since FADVISE can truncate files and MADVISE operates on memory, reverse >> the audit_skip tags. >> >> Fixes: 5bd2182d58e9 ("audit,io_uring,io-wq: add some basic audit support to >>

Re: [PATCH v1 1/2] io_uring,audit: audit IORING_OP_FADVISE but not IORING_OP_MADVISE

2023-01-28 Thread Steve Grubb
On Friday, January 27, 2023 5:57:30 PM EST Paul Moore wrote: > On Fri, Jan 27, 2023 at 5:45 PM Jens Axboe wrote: > > On 1/27/23 3:35?PM, Paul Moore wrote: > > > On Fri, Jan 27, 2023 at 12:24 PM Richard Guy Briggs wrote: > > >> Since FADVISE can truncate files and MADVISE operates on memory, > >

Re: [PATCH v1 0/2] two suggested iouring op audit updates

2023-01-28 Thread Steve Grubb
On Friday, January 27, 2023 5:53:24 PM EST Paul Moore wrote: > On Fri, Jan 27, 2023 at 5:46 PM Jens Axboe wrote: > > On 1/27/23 3:38 PM, Paul Moore wrote: > > > On Fri, Jan 27, 2023 at 2:43 PM Jens Axboe wrote: > > >> On 1/27/23 12:42 PM, Paul Moore wrote: > > >>> On Fri, Jan 27, 2023 at 12:40

Re: [PATCH v1 0/2] two suggested iouring op audit updates

2023-01-28 Thread Paul Moore
On Sat, Jan 28, 2023 at 11:48 AM Steve Grubb wrote: > On Friday, January 27, 2023 5:53:24 PM EST Paul Moore wrote: > > On Fri, Jan 27, 2023 at 5:46 PM Jens Axboe wrote: > > > On 1/27/23 3:38 PM, Paul Moore wrote: > > > > On Fri, Jan 27, 2023 at 2:43 PM Jens Axboe wrote: > > > >> On 1/27/23

Re: [PATCH v1 2/2] io_uring,audit: do not log IORING_OP_*GETXATTR

2023-01-28 Thread Steve Grubb
On Friday, January 27, 2023 5:43:02 PM EST Paul Moore wrote: > On Fri, Jan 27, 2023 at 12:24 PM Richard Guy Briggs wrote: > > Getting XATTRs is not particularly interesting security-wise. > > > > Suggested-by: Steve Grubb > > Fixes: a56834e0fafe ("io_uring: add fgetxattr and getxattr support")