Re: [PATCH v4 0/3] Send audit/procinfo/cgroup data in socket-level control message

2014-01-23 Thread Kay Sievers
On Thu, Jan 16, 2014 at 10:29 AM, Jan Kaluža wrote: > On 01/16/2014 12:23 AM, Tejun Heo wrote: >> On Wed, Jan 15, 2014 at 06:21:43PM -0500, Eric Paris wrote: >>> >>> Reliably being able to audit what process requested an action is >>> extremely useful. And I like the audit patch, as it is a coupl

Re: [PATCH v4 0/3] Send audit/procinfo/cgroup data in socket-level control message

2014-01-16 Thread Jan Kaluža
On 01/16/2014 12:23 AM, Tejun Heo wrote: On Wed, Jan 15, 2014 at 06:21:43PM -0500, Eric Paris wrote: Reliably being able to audit what process requested an action is extremely useful. And I like the audit patch, as it is a couple of ints we are storing. procinfo and cgroup can both be up to 4k

Re: [PATCH v4 0/3] Send audit/procinfo/cgroup data in socket-level control message

2014-01-15 Thread Tejun Heo
On Wed, Jan 15, 2014 at 06:21:43PM -0500, Eric Paris wrote: > Reliably being able to audit what process requested an action is > extremely useful. And I like the audit patch, as it is a couple of ints > we are storing. > > procinfo and cgroup can both be up to 4k of data. > > Is there an alterna

Re: [PATCH v4 0/3] Send audit/procinfo/cgroup data in socket-level control message

2014-01-15 Thread Eric Paris
On Wed, 2014-01-15 at 12:17 -0800, David Miller wrote: > From: Jan Kaluza > Date: Mon, 13 Jan 2014 09:01:46 +0100 > > > Changes introduced in this patchset can also increase performance > > of such server-like processes, because current way of opening and > > parsing /proc/$PID/* files is much mo

Re: [PATCH v4 0/3] Send audit/procinfo/cgroup data in socket-level control message

2014-01-15 Thread David Miller
From: Jan Kaluza Date: Mon, 13 Jan 2014 09:01:46 +0100 > Changes introduced in this patchset can also increase performance > of such server-like processes, because current way of opening and > parsing /proc/$PID/* files is much more expensive than receiving these > metadata using SCM. The proble

Re: [PATCH v4 0/3] Send audit/procinfo/cgroup data in socket-level control message

2014-01-14 Thread Jan Kaluža
On 01/13/2014 08:44 PM, Casey Schaufler wrote: On 1/13/2014 12:01 AM, Jan Kaluza wrote: Hi, this patchset against net-next (applies also to linux-next) adds 3 new types of "Socket"-level control message (SCM_AUDIT, SCM_PROCINFO and SCM_CGROUP). How about the group list, while you're at it?

Re: [PATCH v4 0/3] Send audit/procinfo/cgroup data in socket-level control message

2014-01-13 Thread Casey Schaufler
On 1/13/2014 12:01 AM, Jan Kaluza wrote: > Hi, > > this patchset against net-next (applies also to linux-next) adds 3 new types > of "Socket"-level control message (SCM_AUDIT, SCM_PROCINFO and SCM_CGROUP). How about the group list, while you're at it? > > Server-like processes in many cases need

Re: [PATCH v4 0/3] Send audit/procinfo/cgroup data in socket-level control message

2014-01-13 Thread Tejun Heo
Hello, On Mon, Jan 13, 2014 at 09:01:46AM +0100, Jan Kaluza wrote: > this patchset against net-next (applies also to linux-next) adds 3 new types > of "Socket"-level control message (SCM_AUDIT, SCM_PROCINFO and SCM_CGROUP). > > Server-like processes in many cases need credentials and other > meta

[PATCH v4 0/3] Send audit/procinfo/cgroup data in socket-level control message

2014-01-13 Thread Jan Kaluza
Hi, this patchset against net-next (applies also to linux-next) adds 3 new types of "Socket"-level control message (SCM_AUDIT, SCM_PROCINFO and SCM_CGROUP). Server-like processes in many cases need credentials and other metadata of the peer, to decide if the calling process is allowed to request