Re: [PATCH v4] audit: add fields to exclude filter by reusing user filter

2016-06-27 Thread Richard Guy Briggs
On 2016-06-27 11:18, Paul Moore wrote: > On Fri, Jun 24, 2016 at 4:35 PM, Richard Guy Briggs wrote: > > RFE: add additional fields for use in audit filter exclude rules > > https://github.com/linux-audit/audit-kernel/issues/5 > > > > Re-factor and combine audit_filter_type() with

Re: [PATCH v4] audit: add fields to exclude filter by reusing user filter

2016-06-27 Thread Richard Guy Briggs
On 2016-06-27 11:18, Paul Moore wrote: > On Fri, Jun 24, 2016 at 4:35 PM, Richard Guy Briggs wrote: > > RFE: add additional fields for use in audit filter exclude rules > > https://github.com/linux-audit/audit-kernel/issues/5 > > > > Re-factor and combine audit_filter_type() with

Re: [PATCH v4] audit: add fields to exclude filter by reusing user filter

2016-06-27 Thread Paul Moore
On Fri, Jun 24, 2016 at 4:35 PM, Richard Guy Briggs wrote: > RFE: add additional fields for use in audit filter exclude rules > https://github.com/linux-audit/audit-kernel/issues/5 > > Re-factor and combine audit_filter_type() with audit_filter_user() to > use

Re: [PATCH v4] audit: add fields to exclude filter by reusing user filter

2016-06-27 Thread Paul Moore
On Fri, Jun 24, 2016 at 4:35 PM, Richard Guy Briggs wrote: > RFE: add additional fields for use in audit filter exclude rules > https://github.com/linux-audit/audit-kernel/issues/5 > > Re-factor and combine audit_filter_type() with audit_filter_user() to > use audit_filter_user_rules() to enable

[PATCH v4] audit: add fields to exclude filter by reusing user filter

2016-06-24 Thread Richard Guy Briggs
RFE: add additional fields for use in audit filter exclude rules https://github.com/linux-audit/audit-kernel/issues/5 Re-factor and combine audit_filter_type() with audit_filter_user() to use audit_filter_user_rules() to enable the exclude filter to additionally filter on PID, UID, GID, AUID,

[PATCH v4] audit: add fields to exclude filter by reusing user filter

2016-06-24 Thread Richard Guy Briggs
RFE: add additional fields for use in audit filter exclude rules https://github.com/linux-audit/audit-kernel/issues/5 Re-factor and combine audit_filter_type() with audit_filter_user() to use audit_filter_user_rules() to enable the exclude filter to additionally filter on PID, UID, GID, AUID,