 Deepa Dinamani
|
2115bb250f
audit: Use timespec64 to represent audit timestamps
|
8 years ago |
 Paul Moore
|
b6c7c115c2
audit: store the auditd PID as a pid struct instead of pid_t
|
8 years ago |
|
Paul Moore
|
45a0642b4d
audit: kernel generated netlink traffic should have a portid of 0
|
8 years ago |
|
Paul Moore
|
ab6434a137
audit: move audit_signal_info() into kernel/auditsc.c
|
8 years ago |
|
Paul Moore
|
5b52330bbf
audit: fix auditd/kernel connection state tracking
|
8 years ago |
 Linus Torvalds
|
b8989bccd6
Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/audit
|
8 years ago |
 Richard Guy Briggs
|
ca86cad738
audit: log module name on init_module
|
8 years ago |
 Al Viro
|
8bd107633b
audit_log_{name,link_denied}: constify struct path
|
8 years ago |
|
Linus Torvalds
|
797cee982e
Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/audit
|
9 years ago |
|
Richard Guy Briggs
|
3f5be2da85
audit: move audit_get_tty to reduce scope and kabi changes
|
9 years ago |
|
Richard Guy Briggs
|
86b2efbe3a
audit: add fields to exclude filter by reusing user filter
|
9 years ago |
 Andreas Gruenbacher
|
d6335d77a7
security: Make inode argument of inode_getsecid non-const
|
9 years ago |
 Yaowei Bai
|
6f1b5d7afe
audit: audit_tree_match can be boolean
|
9 years ago |
|
Linus Torvalds
|
425afcff13
Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/audit
|
10 years ago |
|
Richard Guy Briggs
|
34d99af52a
audit: implement audit by executable
|
10 years ago |
|
Richard Guy Briggs
|
7f49294282
audit: clean simple fsnotify implementation
|
10 years ago |
|
Linus Torvalds
|
27cf3a16b2
Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/audit
|
10 years ago |
 Davidlohr Bueso
|
4766b199ef
audit: consolidate handling of mm->exe_file
|
10 years ago |
 Paul Moore
|
55422d0bd2
audit: replace getname()/putname() hacks with reference counters
|
10 years ago |
|
Richard Guy Briggs
|
691e6d59d2
audit: reduce scope of audit_log_fcaps
|
11 years ago |
 Eric W. Biederman
|
638a0fd2a0
audit: Use struct net not pid_t to remember the network namespce to reply in
|
11 years ago |
 William Roberts
|
3f1c82502c
audit: Audit proc/<pid>/cmdline aka proctitle
|
11 years ago |
 Joe Perches
|
3e1d0bb622
audit: Convert int limit uses to u32
|
11 years ago |
|
Richard Guy Briggs
|
33faba7fa7
audit: listen in all network namespaces
|
12 years ago |
|
Richard Guy Briggs
|
f9441639e6
audit: fix netlink portid naming and types
|
12 years ago |
|
Richard Guy Briggs
|
9410d228a4
audit: call audit_bprm() only once to add AUDIT_EXECVE information
|
11 years ago |
|
Richard Guy Briggs
|
d9cfea91e9
audit: move audit_aux_data_execve contents into audit_context union
|
11 years ago |
 Jeff Layton
|
79f6530cb5
audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_names record
|
12 years ago |
|
Linus Torvalds
|
c4cc75c332
Merge git://git.infradead.org/users/eparis/audit
|
12 years ago |
 Eric Paris
|
b24a30a730
audit: fix event coverage of AUDIT_ANOM_LINK
|
12 years ago |
