Eric Paris
|
9175c9d2ae
audit: fix type of sessionid in audit_set_loginuid()
|
11 years ago |
Richard Guy Briggs
|
9410d228a4
audit: call audit_bprm() only once to add AUDIT_EXECVE information
|
11 years ago |
Richard Guy Briggs
|
d9cfea91e9
audit: move audit_aux_data_execve contents into audit_context union
|
11 years ago |
Richard Guy Briggs
|
9462dc5981
audit: remove unused envc member of audit_aux_data_execve
|
11 years ago |
Eric W. Biederman
|
bd131fb1aa
audit: Kill the unused struct audit_aux_data_capset
|
12 years ago |
Richard Guy Briggs
|
db510fc5cd
audit: update AUDIT_INODE filter rule to comparator function
|
12 years ago |
Eric Paris
|
21b85c31d2
audit: audit feature to set loginuid immutable
|
12 years ago |
Eric Paris
|
d040e5af38
audit: audit feature to only allow unsetting the loginuid
|
12 years ago |
Eric Paris
|
81407c84ac
audit: allow unsetting the loginuid (with priv)
|
12 years ago |
Eric Paris
|
83fa6bbe4c
audit: remove CONFIG_AUDIT_LOGINUID_IMMUTABLE
|
12 years ago |
Eric Paris
|
da0a610497
audit: loginuid functions coding style
|
12 years ago |
Oleg Nesterov
|
d48d805122
audit_alloc: clear TIF_SYSCALL_AUDIT if !audit_context
|
11 years ago |
Jeff Layton
|
79f6530cb5
audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_names record
|
12 years ago |
Eric W. Biederman
|
780a7654ce
audit: Make testing for a valid loginuid explicit.
|
12 years ago |
Eric Paris
|
b24a30a730
audit: fix event coverage of AUDIT_ANOM_LINK
|
12 years ago |
Eric Paris
|
b122c3767c
audit: use a consistent audit helper to log lsm information
|
12 years ago |
Eric Paris
|
34c474de7b
audit: fix build break when AUDIT_DEBUG == 2
|
12 years ago |
Eric Paris
|
ad395abece
Audit: do not print error when LSMs disabled
|
12 years ago |
Andrew Morton
|
e2c5adc88a
auditsc: remove audit_set_context() altogether - fold it into its caller
|
12 years ago |
Rakib Mullick
|
17c6ee707a
auditsc: Use kzalloc instead of kmalloc+memset.
|
12 years ago |
Chen Gang
|
2950fa9d32
kernel: audit: beautify code, for extern function, better to check its parameters by itself
|
12 years ago |
Dmitry Monakhov
|
65ada7bc02
audit: destroy long filenames correctly
|
12 years ago |
Matvejchikov Ilya
|
37eebe39c9
audit: improve GID/EGID comparation logic
|
13 years ago |
Kees Cook
|
0644ec0cc8
audit: catch possible NULL audit buffers
|
12 years ago |
Kees Cook
|
7b9205bd77
audit: create explicit AUDIT_SECCOMP event type
|
12 years ago |
Linus Torvalds
|
9977d9b379
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/signal
|
12 years ago |
Al Viro
|
c62d773a37
audit: no nested contexts anymore...
|
12 years ago |
Alan Cox
|
8ae763cd7e
audit: remove bogus tty name check
|
12 years ago |
Jeff Layton
|
adb5c2473d
audit: make audit_inode take struct filename
|
12 years ago |
Jeff Layton
|
7ac86265dc
audit: allow audit code to satisfy getname requests from its names_list
|
12 years ago |