Re: [PATCH] audit: set TIF_AUDIT_SYSCALL only if audit filter has been populated

2018-03-07 Thread Paul Moore
On Wed, Mar 7, 2018 at 6:41 PM, Paul Moore wrote: > On Wed, Mar 7, 2018 at 11:48 AM, Jiri Kosina wrote: >> On Wed, 7 Mar 2018, Andy Lutomirski wrote: >>> Wow, this was a long time ago. >> >> Oh yeah; but it now resurfaced on our side, as we are of course

Re: audit watch rules and docker containers

2018-03-07 Thread Richard Guy Briggs
On 2018-03-05 21:39, Rakesh wrote: > Hi Richard, > > Thanks for reviewing the email and my apologies for the formatting > issue. This response corrects that. (I don't see any format correction in this response.) > I looked at Steve's response (with the embedded link) and have also > followed