Jeff Layton
|
e3d6b07b8b
audit: optimize audit_compare_dname_path
|
12 anni fa |
Eric Paris
|
29e9a3467c
audit: make audit_compare_dname_path use parent_len helper
|
12 anni fa |
Jeff Layton
|
563a0d1236
audit: remove dirlen argument to audit_compare_dname_path
|
12 anni fa |
Jeff Layton
|
bfcec70874
audit: set the name_len in audit_inode for parent lookups
|
12 anni fa |
Eric W. Biederman
|
e1760bd5ff
userns: Convert the audit loginuid to be a kuid
|
12 anni fa |
Eric W. Biederman
|
ca57ec0f00
audit: Add typespecific uid and gid comparators
|
12 anni fa |
Eric W. Biederman
|
017143fecb
audit: Remove the unused uid parameter from audit_receive_filter
|
12 anni fa |
Eric W. Biederman
|
02276bda4a
audit: Use current instead of NETLINK_CREDS() in audit_filter
|
12 anni fa |
Eric Paris
|
02d86a568c
audit: allow interfield comparison in audit rules
|
13 anni fa |
Eric Paris
|
54d3218b31
audit: allow audit matching on inode gid
|
13 anni fa |
Eric Paris
|
efaffd6e44
audit: allow matching on obj_uid
|
13 anni fa |
Eric Paris
|
7ff68e53ec
audit: reject entry,always rules
|
13 anni fa |
Eric Paris
|
5ef30ee53b
audit: make filetype matching consistent with other filters
|
13 anni fa |
Patrick McHardy
|
c53fa1ed92
netlink: kill loginuid/sessionid/sid members from struct netlink_skb_parms
|
14 anni fa |
Miloslav Trmac
|
d29be158a6
Audit: add support to match lsm labels on user audit messages
|
14 anni fa |
Eric Paris
|
a05fb6cc57
audit: do not get and put just to free a watch
|
15 anni fa |
Eric Paris
|
ae7b8f4108
Audit: clean up the audit_watch split
|
15 anni fa |
Tejun Heo
|
5a0e3ad6af
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
|
15 anni fa |
Eric Paris
|
9d96098510
Audit: clean up all op= output to include string quoting
|
16 anni fa |
Eric Paris
|
35fe4d0b1b
Audit: move audit_get_nd completely into audit_watch
|
16 anni fa |
Eric Paris
|
cfcad62c74
audit: seperate audit inode watches into a subfile
|
16 anni fa |
Eric Paris
|
e85188f424
Audit: dereferencing krule as if it were an audit_watch
|
16 anni fa |
Eric Paris
|
35aa901c0b
Audit: fix audit watch use after free
|
16 anni fa |
Wu Fengguang
|
381a80e6df
inotify: use GFP_NOFS in kernel_event() to work around a lockdep false-positive
|
16 anni fa |
Zhenwen Xu
|
c28bb7da74
make the e->rule.xxx shorter in kernel auditfilter.c
|
16 anni fa |
Al Viro
|
5af75d8d58
audit: validate comparison operations, store them in sane form
|
16 anni fa |
Al Viro
|
36c4f1b18c
clean up audit_rule_{add,del} a bit
|
16 anni fa |
Al Viro
|
e45aa212ea
audit rules ordering, part 2
|
16 anni fa |
Al Viro
|
0590b9335a
fixing audit rule ordering mess, part 1
|
16 anni fa |
Al Viro
|
1a9d0797b8
audit_update_lsm_rules() misses the audit_inode_hash[] ones
|
16 anni fa |