Age | Commit message (Expand) | Author | Files | Lines |
2023-12-20 | sem: Split out sem_types.h | Kent Overstreet | 1 | -0/+1 |
2023-08-31 | netfilter: nf_tables: Audit log rule reset | Phil Sutter | 1 | -0/+1 |
2023-08-31 | netfilter: nf_tables: Audit log setelem reset | Phil Sutter | 1 | -0/+1 |
2023-05-17 | audit: avoid missing-prototype warnings | Arnd Bergmann | 1 | -2/+0 |
2023-02-07 | fanotify,audit: Allow audit to use the full permission event response | Richard Guy Briggs | 1 | -4/+5 |
2023-02-07 | fanotify: Ensure consistent variable type for response | Richard Guy Briggs | 1 | -3/+3 |
2022-08-04 | audit, io_uring, io-wq: Fix memory leak in io_sq_thread() and io_wqe_worker() | Peilin Ye | 1 | -5/+0 |
2022-06-13 | audit: make is_audit_feature_set() static | Xiu Jianfeng | 1 | -2/+0 |
2022-05-17 | audit,io_uring,io-wq: call __audit_uring_exit for dummy contexts | Julian Orth | 1 | -1/+1 |
2021-11-01 | Merge tag 'audit-pr-20211101' of git://git.kernel.org/pub/scm/linux/kernel/gi... | Linus Torvalds | 1 | -0/+11 |
2021-10-04 | audit: add OPENAT2 record to list "how" info | Richard Guy Briggs | 1 | -0/+10 |
2021-10-01 | audit: replace magic audit syscall class numbers with macros | Richard Guy Briggs | 1 | -0/+1 |
2021-09-19 | audit,io_uring,io-wq: add some basic audit support to io_uring | Paul Moore | 1 | -0/+26 |
2020-10-27 | audit: trigger accompanying records when no rules present | Richard Guy Briggs | 1 | -8/+0 |
2020-07-21 | audit: purge audit_log_string from the intra-kernel audit API | Richard Guy Briggs | 1 | -5/+0 |
2020-07-08 | audit: issue CWD record to accompany LSM_AUDIT_DATA_* records | Richard Guy Briggs | 1 | -1/+8 |
2020-07-01 | audit: remove unused !CONFIG_AUDITSYSCALL __audit_inode* stubs | Richard Guy Briggs | 1 | -8/+0 |
2020-06-29 | audit: add gfp parameter to audit_log_nfcfg | Richard Guy Briggs | 1 | -4/+4 |
2020-06-23 | audit: log nftables configuration change events | Richard Guy Briggs | 1 | -0/+18 |
2020-05-07 | audit: Replace zero-length array with flexible-array | Gustavo A. R. Silva | 1 | -1/+1 |
2020-04-28 | netfilter: add audit table unregister actions | Richard Guy Briggs | 1 | -0/+1 |
2020-04-28 | audit: tidy and extend netfilter_cfg x_tables | Richard Guy Briggs | 1 | -0/+21 |
2019-10-03 | audit: Report suspicious O_CREAT usage | Kees Cook | 1 | -2/+3 |
2019-08-30 | kill LOOKUP_NO_EVAL, don't bother including namei.h from audit.h | Al Viro | 1 | -1/+0 |
2019-07-21 | audit_inode(): switch to passing AUDIT_INODE_... | Al Viro | 1 | -13/+7 |
2019-07-08 | Merge tag 'audit-pr-20190702' of git://git.kernel.org/pub/scm/linux/kernel/gi... | Linus Torvalds | 1 | -0/+9 |
2019-05-30 | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156 | Thomas Gleixner | 1 | -15/+1 |
2019-05-21 | audit: deliver signal_info regarless of syscall | Richard Guy Briggs | 1 | -0/+9 |
2019-04-15 | ntp: Audit NTP parameters adjustment | Ondrej Mosnacek | 1 | -0/+61 |
2019-04-15 | timekeeping: Audit clock adjustments | Ondrej Mosnacek | 1 | -0/+14 |
2019-02-07 | audit: hide auditsc_get_stamp and audit_serial prototypes | Richard Guy Briggs | 1 | -9/+0 |
2019-01-30 | audit: ignore fcaps on umount | Richard Guy Briggs | 1 | -5/+10 |
2019-01-25 | audit: move loginuid and sessionid from CONFIG_AUDITSYSCALL to CONFIG_AUDIT | Richard Guy Briggs | 1 | -19/+23 |
2018-11-26 | audit: use current whenever possible | Paul Moore | 1 | -4/+2 |
2018-11-19 | audit: localize audit_log_session_info prototype | Richard Guy Briggs | 1 | -2/+0 |
2018-06-19 | audit: eliminate audit_enabled magic number comparison | Richard Guy Briggs | 1 | -1/+4 |
2018-05-14 | audit: use inline function to set audit context | Richard Guy Briggs | 1 | -0/+7 |
2018-05-14 | audit: use inline function to get audit context | Richard Guy Briggs | 1 | -3/+12 |
2018-05-14 | audit: convert sessionid unset to a macro | Richard Guy Briggs | 1 | -1/+1 |
2018-05-08 | seccomp: Don't special case audited processes when logging | Tyler Hicks | 1 | -9/+1 |
2018-05-08 | seccomp: Audit attempts to modify the actions_logged sysctl | Tyler Hicks | 1 | -0/+5 |
2018-03-21 | audit: remove path param from link denied function | Richard Guy Briggs | 1 | -4/+2 |
2017-11-15 | Merge tag 'audit-pr-20171113' of git://git.kernel.org/pub/scm/linux/kernel/gi... | Linus Torvalds | 1 | -8/+0 |
2017-11-10 | Audit: remove unused audit_log_secctx function | Casey Schaufler | 1 | -8/+0 |
2017-10-10 | audit: Record fanotify access control decisions | Steve Grubb | 1 | -0/+10 |
2017-09-22 | Merge tag 'seccomp-v4.14-rc2' of git://git.kernel.org/pub/scm/linux/kernel/gi... | Linus Torvalds | 1 | -5/+1 |
2017-09-03 | ipc: mqueue: Replace timespec with timespec64 | Deepa Dinamani | 1 | -3/+3 |
2017-08-14 | seccomp: Sysctl to configure actions that are allowed to be logged | Tyler Hicks | 1 | -5/+1 |
2017-05-02 | audit: Use timespec64 to represent audit timestamps | Deepa Dinamani | 1 | -2/+2 |
2017-05-02 | audit: kernel generated netlink traffic should have a portid of 0 | Paul Moore | 1 | -2/+1 |
2017-02-21 | Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/audit | Linus Torvalds | 1 | -0/+32 |
2017-02-13 | audit: log module name on init_module | Richard Guy Briggs | 1 | -0/+12 |
2017-01-18 | audit: log 32-bit socketcalls | Richard Guy Briggs | 1 | -0/+20 |
2016-12-05 | audit_log_{name,link_denied}: constify struct path | Al Viro | 1 | -1/+1 |
2016-06-27 | audit: add fields to exclude filter by reusing user filter | Richard Guy Briggs | 1 | -2/+0 |
2016-01-27 | tty: audit: Handle tty audit enable atomically | Peter Hurley | 1 | -0/+4 |
2016-01-17 | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo... | Linus Torvalds | 1 | -4/+4 |
2016-01-13 | audit: force seccomp event logging to honor the audit_enabled flag | Paul Moore | 1 | -100/+104 |
2015-12-24 | security: Make inode argument of inode_getsecid non-const | Andreas Gruenbacher | 1 | -4/+4 |
2015-11-04 | audit: audit_string_contains_control can be boolean | Yaowei Bai | 1 | -1/+1 |
2015-11-04 | audit: audit_dummy_context can be boolean | Yaowei Bai | 1 | -3/+3 |
2015-08-06 | audit: implement audit by executable | Richard Guy Briggs | 1 | -0/+1 |
2015-08-06 | audit: use macros for unset inode and device values | Richard Guy Briggs | 1 | -0/+3 |
2015-02-17 | Merge branch 'getname2' of git://git.kernel.org/pub/scm/linux/kernel/git/viro... | Linus Torvalds | 1 | -3/+0 |
2015-02-11 | Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/audit | Linus Torvalds | 1 | -1/+0 |
2015-01-23 | audit: replace getname()/putname() hacks with reference counters | Paul Moore | 1 | -3/+0 |
2015-01-20 | audit: remove vestiges of vers_ops | Richard Guy Briggs | 1 | -1/+0 |
2014-12-23 | Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/audit | Linus Torvalds | 1 | -0/+4 |
2014-12-23 | audit: restore AUDIT_LOGINUID unset ABI | Richard Guy Briggs | 1 | -0/+4 |
2014-11-19 | new helper: audit_file() | Al Viro | 1 | -0/+9 |
2014-10-22 | audit: Remove "weak" from audit_classify_compat_syscall() declaration | Bjorn Helgaas | 1 | -1/+1 |
2014-09-23 | audit: use union for audit_field values since they are mutually exclusive | Richard Guy Briggs | 1 | -5/+9 |
2014-09-23 | audit: x86: drop arch from __audit_syscall_entry() interface | Richard Guy Briggs | 1 | -3/+2 |
2014-09-23 | audit: fix build error when asm/syscall.h does not exist | Eric Paris | 1 | -1/+2 |
2014-09-23 | ARCH: AUDIT: audit_syscall_entry() should not require the arch | Eric Paris | 1 | -3/+4 |
2014-04-10 | AUDIT: make audit_is_compat depend on CONFIG_AUDIT_COMPAT_GENERIC | Chris Metcalf | 1 | -1/+1 |
2014-03-24 | audit: define audit_is_compat in kernel internal header | Eric Paris | 1 | -0/+6 |
2014-03-20 | audit: Add generic compat syscall support | AKASHI Takahiro | 1 | -0/+8 |
2014-03-20 | audit: Send replies in the proper network namespace. | Eric W. Biederman | 1 | -1/+2 |
2014-01-14 | audit: Convert int limit uses to u32 | Joe Perches | 1 | -1/+1 |
2014-01-13 | audit: correct a type mismatch in audit_syscall_exit() | AKASHI Takahiro | 1 | -1/+1 |
2014-01-13 | audit: refactor audit_receive_msg() to clarify AUDIT_*_RULE* cases | Richard Guy Briggs | 1 | -1/+3 |
2014-01-13 | audit: fix incorrect type of sessionid | Richard Guy Briggs | 1 | -2/+2 |
2014-01-13 | audit: fix netlink portid naming and types | Richard Guy Briggs | 1 | -1/+1 |
2014-01-13 | audit: Simplify and correct audit_log_capset | Eric W. Biederman | 1 | -5/+5 |
2013-11-05 | audit: call audit_bprm() only once to add AUDIT_EXECVE information | Richard Guy Briggs | 1 | -6/+3 |
2013-11-05 | audit: move audit_aux_data_execve contents into audit_context union | Richard Guy Briggs | 1 | -2/+2 |
2013-11-05 | audit: implement generic feature setting and retrieving | Eric Paris | 1 | -0/+2 |
2013-07-09 | audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_... | Jeff Layton | 1 | -4/+22 |
2013-05-07 | audit: Make testing for a valid loginuid explicit. | Eric W. Biederman | 1 | -0/+5 |
2013-04-30 | audit: fix event coverage of AUDIT_ANOM_LINK | Eric Paris | 1 | -9/+11 |
2013-04-30 | helper for some session id stuff | Eric Paris | 1 | -0/+2 |
2013-04-30 | audit: use a consistent audit helper to log lsm information | Eric Paris | 1 | -3/+5 |
2013-04-30 | audit: stop pushing loginid, uid, sessionid as arguments | Eric Paris | 1 | -2/+1 |
2013-04-16 | audit: allow checking the type of audit message in the user filter | Eric Paris | 1 | -1/+1 |
2013-04-10 | kernel: audit: beautify code, for extern function, better to check its parame... | Chen Gang | 1 | -5/+11 |
2013-04-10 | audit: Syscall rules are not applied to existing processes on non-x86 | Anton Blanchard | 1 | -1/+1 |
2013-01-11 | linux/audit.h: move ptrace.h include to kernel header | Mike Frysinger | 1 | -0/+1 |
2013-01-11 | audit: create explicit AUDIT_SECCOMP event type | Kees Cook | 1 | -1/+2 |
2012-10-13 | UAPI: (Scripted) Disintegrate include/linux | David Howells | 1 | -380/+1 |
2012-10-13 | Merge tag 'for-3.7' of git://openrisc.net/jonas/linux | Linus Torvalds | 1 | -0/+1 |
2012-10-12 | audit: make audit_inode take struct filename | Jeff Layton | 1 | -4/+6 |
2012-10-12 | audit: allow audit code to satisfy getname requests from its names_list | Jeff Layton | 1 | -0/+11 |
2012-10-12 | vfs: define struct filename and have getname() return it | Jeff Layton | 1 | -5/+7 |
2012-10-12 | audit: overhaul __audit_inode_child to accomodate retrying | Jeff Layton | 1 | -5/+11 |
2012-10-12 | audit: set the name_len in audit_inode for parent lookups | Jeff Layton | 1 | -5/+10 |
2012-10-12 | audit: add a new "type" field to audit_names struct | Jeff Layton | 1 | -0/+5 |
2012-10-12 | audit: reverse arguments to audit_inode_child | Jeff Layton | 1 | -9/+9 |
2012-10-06 | audit.h: replace defines with C stubs | Kees Cook | 1 | -53/+153 |
2012-10-02 | Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/... | Linus Torvalds | 1 | -0/+2 |
2012-09-21 | audit: define AUDIT_ARCH_OPENRISC | Kees Cook | 1 | -0/+1 |
2012-09-17 | userns: Convert the audit loginuid to be a kuid | Eric W. Biederman | 1 | -3/+3 |
2012-09-17 | audit: Add typespecific uid and gid comparators | Eric W. Biederman | 1 | -0/+2 |
2012-09-17 | audit: Remove the unused uid parameter from audit_receive_filter | Eric W. Biederman | 1 | -1/+1 |
2012-09-17 | audit: Use current instead of NETLINK_CREDS() in audit_filter | Eric W. Biederman | 1 | -1/+1 |
2012-09-12 | audit: export audit_log_task_info | Peter Moody | 1 | -0/+2 |
2012-07-29 | fs: add link restriction audit reporting | Kees Cook | 1 | -0/+4 |
2012-04-14 | seccomp: remove duplicated failure logging | Kees Cook | 1 | -4/+4 |
2012-03-20 | constify path argument of audit_log_d_path() | Al Viro | 1 | -1/+1 |
2012-01-17 | audit: comparison on interprocess fields | Peter Moody | 1 | -1/+23 |
2012-01-17 | audit: implement all object interfield comparisons | Peter Moody | 1 | -1/+9 |
2012-01-17 | audit: allow interfield comparison between gid and ogid | Eric Paris | 1 | -1/+2 |
2012-01-17 | audit: allow interfield comparison in audit rules | Eric Paris | 1 | -0/+4 |
2012-01-17 | audit: remove task argument to audit_set_loginuid | Eric Paris | 1 | -1/+1 |
2012-01-17 | audit: allow audit matching on inode gid | Eric Paris | 1 | -0/+1 |
2012-01-17 | audit: allow matching on obj_uid | Eric Paris | 1 | -0/+1 |
2012-01-17 | audit: remove audit_finish_fork as it can't be called | Eric Paris | 1 | -2/+0 |
2012-01-17 | audit: inline audit_free to simplify the look of generic code | Eric Paris | 1 | -1/+6 |
2012-01-17 | audit: drop audit_set_macxattr as it doesn't do anything | Eric Paris | 1 | -2/+0 |
2012-01-17 | audit: inline checks for not needing to collect aux records | Eric Paris | 1 | -3/+20 |
2012-01-17 | audit: inline audit_syscall_entry to reduce burden on archs | Eric Paris | 1 | -3/+10 |
2012-01-17 | Audit: push audit success and retcode into arch ptrace.h | Eric Paris | 1 | -8/+14 |
2012-01-17 | seccomp: audit abnormal end to a process due to seccomp | Eric Paris | 1 | -0/+8 |
2012-01-03 | switch kern_ipc_perm to umode_t | Al Viro | 1 | -2/+2 |
2012-01-03 | switch mq_open() to umode_t | Al Viro | 1 | -2/+2 |
2011-10-31 | treewide: use __printf not __attribute__((format(printf,...))) | Joe Perches | 1 | -6/+5 |
2011-06-30 | netfilter: add SELinux context support to AUDIT target | Mr Dash Four | 1 | -0/+7 |
2011-01-19 | Merge branch 'master' of /repos/git/net-next-2.6 | Patrick McHardy | 1 | -0/+1 |
2011-01-16 | netfilter: create audit records for x_tables replaces | Thomas Graf | 1 | -0/+1 |
2011-01-16 | netfilter: audit target to record accepted/dropped packets | Thomas Graf | 1 | -0/+1 |
2011-01-10 | headers: path.h redux | Alexey Dobriyan | 1 | -0/+1 |
2010-10-30 | audit mmap | Al Viro | 1 | -0/+9 |
2010-08-07 | gcc-4.6: fs: fix unused but set warnings | Andi Kleen | 1 | -1/+1 |
2010-02-08 | Lose the first argument of audit_inode_child() | Al Viro | 1 | -6/+5 |
2009-06-24 | Audit: clean up all op= output to include string quoting | Eric Paris | 1 | -0/+3 |
2009-02-12 | integrity: audit update | Mimi Zohar | 1 | -1/+3 |
2009-02-06 | Merge branch 'master' into next | James Morris | 1 | -50/+48 |
2009-02-06 | integrity: IMA as an integrity service provider | Mimi Zohar | 1 | -0/+5 |
2009-01-04 | audit: validate comparison operations, store them in sane form | Al Viro | 1 | -0/+12 |
2009-01-04 | audit rules ordering, part 2 | Al Viro | 1 | -0/+1 |
2009-01-04 | fixing audit rule ordering mess, part 1 | Al Viro | 1 | -0/+1 |
2009-01-04 | sanitize audit_log_capset() | Al Viro | 1 | -5/+4 |
2009-01-04 | sanitize audit_fd_pair() | Al Viro | 1 | -5/+4 |
2009-01-04 | sanitize audit_mq_open() | Al Viro | 1 | -5/+4 |
2009-01-04 | sanitize AUDIT_MQ_SENDRECV | Al Viro | 1 | -13/+4 |
2009-01-04 | sanitize audit_mq_notify() | Al Viro | 1 | -5/+4 |
2009-01-04 | sanitize audit_mq_getsetattr() | Al Viro | 1 | -5/+4 |
2009-01-04 | sanitize audit_ipc_set_perm() | Al Viro | 1 | -5/+4 |
2009-01-04 | sanitize audit_ipc_obj() | Al Viro | 1 | -5/+4 |
2009-01-04 | sanitize audit_socketcall | Al Viro | 1 | -2/+2 |
2008-12-25 | Merge branch 'next' into for-linus | James Morris | 1 | -0/+26 |
2008-12-09 | [PATCH] fix broken timestamps in AVC generated by kernel threads | Al Viro | 1 | -2/+2 |
2008-12-09 | [PATCH] return records for fork() both to child and parent | Al Viro | 1 | -0/+2 |
2008-11-14 | CRED: Make execve() take advantage of copy-on-write credentials | David Howells | 1 | -16/+0 |
2008-11-14 | CRED: Inaugurate COW credentials | David Howells | 1 | -8/+14 |
2008-11-11 | When the capset syscall is used it is not possible for audit to record the | Eric Paris | 1 | -0/+10 |
2008-11-11 | Any time fcaps or a setuid app under SECURE_NOROOT is used to result in a | Eric Paris | 1 | -0/+26 |
2008-07-24 | remove the v850 port | Adrian Bunk | 1 | -1/+0 |
2008-06-24 | [PATCH] remove useless argument type in audit_filter_user() | Peng Haitao | 1 | -1/+1 |
2008-04-28 | [PATCH] new predicate - AUDIT_FILETYPE | Al Viro | 1 | -0/+1 |
2008-04-28 | Audit: increase the maximum length of the key field | Eric Paris | 1 | -1/+1 |
2008-04-28 | Audit: standardize string audit interfaces | Eric Paris | 1 | -8/+14 |
2008-04-28 | Audit: collect sessionid in netlink messages | Eric Paris | 1 | -1/+2 |
2008-04-19 | Audit: Final renamings and cleanup | Ahmed S. Darwish | 1 | -2/+2 |
2008-04-19 | SELinux: use new audit hooks, remove redundant exports | Ahmed S. Darwish | 1 | -0/+29 |
2008-02-14 | d_path: Use struct path in struct avc_audit_data | Jan Blunck | 1 | -3/+2 |
2008-02-01 | [AUDIT] break large execve argument logging into smaller messages | Eric Paris | 1 | -2/+4 |
2008-02-01 | [AUDIT] Add End of Event record | Eric Paris | 1 | -0/+1 |
2008-02-01 | [AUDIT] add session id to audit messages | Eric Paris | 1 | -0/+2 |
2008-02-01 | [PATCH] get rid of loginuid races | Al Viro | 1 | -1/+1 |
2008-02-01 | [PATCH] switch audit_get_loginuid() to task_struct * | Al Viro | 1 | -2/+2 |
2008-01-30 | NetLabel: Add auditing to the static labeling mechanism | Paul Moore | 1 | -0/+2 |
2007-10-21 | [PATCH] audit: watching subtrees | Al Viro | 1 | -0/+3 |
2007-10-21 | [PATCH] pass dentry to audit_inode()/audit_inode_child() | Al Viro | 1 | -8/+8 |
2007-10-10 | [XFRM]: xfrm audit calls | Joy Latten | 1 | -4/+5 |
2007-08-23 | Renumber AUDIT_TTY_[GS]ET | Miloslav Trmac | 1 | -2/+2 |
2007-07-22 | [PATCH] get rid of AVC_PATH postponed treatment | Al Viro | 1 | -2/+0 |
2007-07-22 | [PATCH] allow audit filtering on bit & operations | Eric Paris | 1 | -13/+17 |
2007-07-16 | Audit: add TTY input auditing | Miloslav Trmac | 1 | -0/+11 |
2007-05-11 | [PATCH] Abnormal End of Processes | Steve Grubb | 1 | -0/+3 |
2007-05-11 | [PATCH] complete message queue auditing | Amy Griffis | 1 | -7/+0 |
2007-05-11 | [PATCH] audit signal recipients | Amy Griffis | 1 | -0/+3 |
2007-05-11 | [PATCH] add SIGNAL syscall class (v3) | Amy Griffis | 1 | -0/+2 |
2007-05-11 | [PATCH] auditing ptrace | Al Viro | 1 | -0/+10 |
2007-03-06 | [PATCH] linux/audit.h needs linux/types.h | Jeff Dike | 1 | -0/+1 |
2007-02-17 | [PATCH] AUDIT_FD_PAIR | Al Viro | 1 | -0/+9 |
2006-12-06 | audit: Add auditing to ipsec | Joy Latten | 1 | -0/+6 |
2006-10-04 | [PATCH] message types updated | Steve Grubb | 1 | -1/+2 |
2006-09-29 | [NetLabel]: audit fixups due to delayed feedback | Paul Moore | 1 | -6/+5 |
2006-09-28 | [NetLabel]: add audit support for configuration changes | Paul Moore | 1 | -0/+6 |