Re: [PATCH 4/6 RFC] netfilter: ebtables: audit table registration

2017-06-02 Thread Paul Moore
On Thu, May 18, 2017 at 1:21 PM, Richard Guy Briggs wrote: > Generate audit NETFILTER_CFG records on ebtables table registration. > > Previously this was only being done for all x_tables operations and ebtables > table replacement. > > Audit only when there is an existing syscall

[PATCH 4/6 RFC] netfilter: ebtables: audit table registration

2017-05-18 Thread Richard Guy Briggs
Generate audit NETFILTER_CFG records on ebtables table registration. Previously this was only being done for all x_tables operations and ebtables table replacement. Audit only when there is an existing syscall audit rule, otherwise issue a standalone record only on table modification rather than