Re: [PATCH] audit: allow not equal op for audit by executable

2018-04-06 Thread Paul Moore
On Fri, Apr 6, 2018 at 7:53 AM, Richard Guy Briggs wrote: > On 2018-04-06 13:10, Ondrej Mosnacek wrote: >> 2018-04-06 12:37 GMT+02:00 Richard Guy Briggs : >> > On 2018-04-06 10:43, Ondrej Mosnacek wrote: >> >> Current implementation of auditing by executable name

Re: [PATCH] audit: allow not equal op for audit by executable

2018-04-06 Thread Richard Guy Briggs
On 2018-04-06 10:43, Ondrej Mosnacek wrote: > Current implementation of auditing by executable name only implements > the 'equal' operator. This patch extends it to also support the 'not > equal' operator. > > See: https://github.com/linux-audit/audit-kernel/issues/53 > > Signed-off-by: Ondrej

Re: [PATCH] audit: allow not equal op for audit by executable

2018-04-06 Thread Ondrej Mosnacek
2018-04-06 12:37 GMT+02:00 Richard Guy Briggs : > On 2018-04-06 10:43, Ondrej Mosnacek wrote: >> Current implementation of auditing by executable name only implements >> the 'equal' operator. This patch extends it to also support the 'not >> equal' operator. >> >> See:

Re: [PATCH] audit: allow not equal op for audit by executable

2018-04-06 Thread Richard Guy Briggs
On 2018-04-06 13:10, Ondrej Mosnacek wrote: > 2018-04-06 12:37 GMT+02:00 Richard Guy Briggs : > > On 2018-04-06 10:43, Ondrej Mosnacek wrote: > >> Current implementation of auditing by executable name only implements > >> the 'equal' operator. This patch extends it to also support

[PATCH] audit: allow not equal op for audit by executable

2018-04-06 Thread Ondrej Mosnacek
Current implementation of auditing by executable name only implements the 'equal' operator. This patch extends it to also support the 'not equal' operator. See: https://github.com/linux-audit/audit-kernel/issues/53 Signed-off-by: Ondrej Mosnacek --- Hi Paul, this turned

Re: [PATCH] audit: allow not equal op for audit by executable

2018-04-06 Thread Steve Grubb
On Friday, April 6, 2018 10:45:37 AM EDT Richard Guy Briggs wrote: > On 2018-04-06 10:32, Steve Grubb wrote: > > On Friday, April 6, 2018 4:43:00 AM EDT Ondrej Mosnacek wrote: > > > Current implementation of auditing by executable name only implements > > > the 'equal' operator. This patch extends

Re: [PATCH] audit: allow not equal op for audit by executable

2018-04-06 Thread Steve Grubb
On Friday, April 6, 2018 4:43:00 AM EDT Ondrej Mosnacek wrote: > Current implementation of auditing by executable name only implements > the 'equal' operator. This patch extends it to also support the 'not > equal' operator. > > See: https://github.com/linux-audit/audit-kernel/issues/53 What

Re: [PATCH] audit: allow not equal op for audit by executable

2018-04-06 Thread Richard Guy Briggs
On 2018-04-06 10:32, Steve Grubb wrote: > On Friday, April 6, 2018 4:43:00 AM EDT Ondrej Mosnacek wrote: > > Current implementation of auditing by executable name only implements > > the 'equal' operator. This patch extends it to also support the 'not > > equal' operator. > > > > See:

Re: [PATCH] audit: allow not equal op for audit by executable

2018-04-06 Thread Ondrej Mosnacek
2018-04-06 16:32 GMT+02:00 Steve Grubb : > On Friday, April 6, 2018 4:43:00 AM EDT Ondrej Mosnacek wrote: >> Current implementation of auditing by executable name only implements >> the 'equal' operator. This patch extends it to also support the 'not >> equal' operator. >> >>

Re: [PATCH] audit: allow not equal op for audit by executable

2018-04-06 Thread Richard Guy Briggs
On 2018-04-06 11:19, Steve Grubb wrote: > On Friday, April 6, 2018 10:45:37 AM EDT Richard Guy Briggs wrote: > > On 2018-04-06 10:32, Steve Grubb wrote: > > > On Friday, April 6, 2018 4:43:00 AM EDT Ondrej Mosnacek wrote: > > > > Current implementation of auditing by executable name only