linux-audit@redhat.com

1

reply

use openat to create a file, then audit log can't show the full path name ?

started 2018-12-04 07:06:17 UTC

2018-12-04 07:11:26 UTC

Steve Grubb

1

reply

[PATCH V2] audit: shorten PATH cap values when zero

started 2018-12-01 03:13:16 UTC

2018-12-04 06:29:34 UTC

Paul Moore

24

replies

[PATCH ghak95] audit: Do not log full CWD path on empty relative paths

started 2018-08-02 16:44:36 UTC

2018-12-04 06:17:34 UTC

Paul Moore

2

replies

operation not supported on filtering

started 2018-12-03 23:26:39 UTC

2018-12-04 01:13:57 UTC

Vincent Fiset

46

replies

[PATCH 12/13] riscv: define syscall_get_arch()

started 2018-11-09 12:59:13 UTC

2018-12-03 23:10:31 UTC

Michael Ellerman

1

reply

Disabling local logging with write_logs = no

started 2018-12-03 13:13:43 UTC

2018-12-03 21:17:59 UTC

Steve Grubb

2

replies

Query regarding to audit netlink call

started 2018-11-26 13:09:57 UTC

2018-11-28 14:30:51 UTC

Avinash Patwari

4

replies

Q: encryted log

started 2018-11-24 21:37:41 UTC

2018-11-28 05:01:47 UTC

Michael Halcrow

2

replies

[PATCH] audit: remove some duplicated includes

started 2018-11-27 04:30:14 UTC

2018-11-28 04:19:23 UTC

Paul Moore

2

replies

[PATCH] audit: use current whenever possible

started 2018-11-22 05:24:39 UTC

2018-11-27 05:50:58 UTC

Paul Moore

2

replies

[PATCH] audit: minimize our use of audit_log_format()

started 2018-11-22 05:23:29 UTC

2018-11-27 05:43:22 UTC

Paul Moore

1

reply

[PATCH] audit/sc: remove some duplicated includes

started 2018-11-27 04:30:14 UTC

2018-11-27 05:43:10 UTC

Paul Moore

1

reply

[PATCH] audit/filter: remove some duplicated includes

started 2018-11-27 04:30:21 UTC

2018-11-27 05:38:24 UTC

Paul Moore

1

reply

[PATCH] kernel/audit: remove some duplicated includes

started 2018-11-27 04:30:21 UTC

2018-11-27 05:38:04 UTC

Paul Moore

1

reply

[PATCH] fsnotify: remove some duplicated includes

started 2018-11-27 04:30:15 UTC

2018-11-27 05:37:43 UTC

Paul Moore

11

replies

[RFC PATCH 0/3] simplify struct audit_krule reveals bug

started 2018-02-12 18:29:38 UTC

2018-11-27 03:43:15 UTC

Paul Moore

4

replies

Logging from within kernel

started 2018-11-24 05:47:25 UTC

2018-11-26 23:54:16 UTC

Paul Moore

6

replies

[RFC PATCH ghak100 V1 1/2] audit: avoid fcaps on MNT_FORCE

started 2018-11-16 23:33:13 UTC

2018-11-20 23:31:30 UTC

Steve Grubb

4

replies

[PATCH] audit: shorten PATH cap values when zero

started 2018-11-16 23:10:01 UTC

2018-11-20 04:05:01 UTC

Paul Moore

1

reply

[PATCH] audit: remove WATCH and TREE config options

started 2018-11-16 23:17:35 UTC

2018-11-20 03:58:56 UTC

Paul Moore

1

reply

[PATCH] audit: localize audit_log_session_info prototype

started 2018-11-17 00:15:04 UTC

2018-11-19 23:36:58 UTC

Paul Moore

1

reply

[PATCH] audit: use session_info helper

started 2018-11-17 03:30:10 UTC

2018-11-19 23:36:50 UTC

Paul Moore

12

replies

[PATCH ghak59 V2 0/6] audit: config_change normalizations and event record gathering

started 2018-07-28 00:48:11 UTC

2018-11-19 22:33:02 UTC

Paul Moore

38

replies

[PATCH 09/11] audit: Allocate fsnotify mark independently of chunk

started 2018-09-04 21:06:29 UTC

2018-11-19 21:19:55 UTC

Paul Moore

1

reply

Using audisp remote results in "dispatch err (pipe full) event lost"

started 2018-11-18 04:50:20 UTC

2018-11-19 03:19:08 UTC

Steve Grubb

6

replies

auditd and CAP_AUDIT_READ

started 2018-11-15 06:57:07 UTC

2018-11-17 23:30:06 UTC

Steve Grubb

9

replies

[PATCH 0/2] riscv: add audit support

started 2018-10-29 15:48:52 UTC

2018-11-15 16:19:32 UTC

Palmer Dabbelt

8

replies

stuck on ghak100 testsuite script

started 2018-11-10 03:48:31 UTC

2018-11-14 02:45:29 UTC

Richard Guy Briggs

26

replies

[PATCH 05/14] audit: Make hash table insertion safe against concurrent lookups

started 2018-10-17 15:14:56 UTC

2018-11-12 21:25:05 UTC

Jan Kara

2

replies

[PATCH ghak99 v1] audit: print empty EXECVE args

started 2018-10-11 01:22:57 UTC

2018-11-07 02:26:57 UTC

Paul Moore