Re: Audit roadmap and new development

2018-03-11 Thread Steve Grubb
On Sun, 11 Mar 2018 17:44:39 + F Rafi wrote: > So container support can be addressed by userspace changes alone Nope. > Or will it require kernel audit subsystem updates as well? The kernel does all the heavy lifting. What this is indicating is that user space will pick up support to use t

Re: Audit roadmap and new development

2018-03-11 Thread Paul Moore
On Sun, Mar 11, 2018 at 1:44 PM, F Rafi wrote: > So container support can be addressed by userspace changes alone Or will it > require kernel audit subsystem updates as well? In order to associate container identifiers with kernel generated audit events, kernel changes are required. You may have

Re: Audit roadmap and new development

2018-03-11 Thread F Rafi
So container support can be addressed by userspace changes alone Or will it require kernel audit subsystem updates as well? Thanks Farhan On Sun, Mar 11, 2018 at 1:08 PM Paul Moore wrote: > On Sun, Mar 11, 2018 at 5:38 AM, Steve Grubb wrote: > > Hello, > > > > I wanted to take a few minutes to

Re: Audit roadmap and new development

2018-03-11 Thread Paul Moore
On Sun, Mar 11, 2018 at 5:38 AM, Steve Grubb wrote: > Hello, > > I wanted to take a few minutes to chat about the future audit roadmap. > The release of audit-2.8.3 represents a breaking point ... Just a quick note that Steve is talking about the audit userspace which he maintains, the work for t

Audit roadmap and new development

2018-03-11 Thread Steve Grubb
Hello, I wanted to take a few minutes to chat about the future audit roadmap. The release of audit-2.8.3 represents a breaking point. Its time for changes. Some of these changes are going to modify configuration files. And new things that may not be compatible with the old will be introduced. So,