aboutsummaryrefslogtreecommitdiffstats
path: root/include/linux/audit.h
AgeCommit message (Expand)AuthorFilesLines
2023-12-20sem: Split out sem_types.hKent Overstreet1-0/+1
2023-08-31netfilter: nf_tables: Audit log rule resetPhil Sutter1-0/+1
2023-08-31netfilter: nf_tables: Audit log setelem resetPhil Sutter1-0/+1
2023-05-17audit: avoid missing-prototype warningsArnd Bergmann1-2/+0
2023-02-07fanotify,audit: Allow audit to use the full permission event responseRichard Guy Briggs1-4/+5
2023-02-07fanotify: Ensure consistent variable type for responseRichard Guy Briggs1-3/+3
2022-08-04audit, io_uring, io-wq: Fix memory leak in io_sq_thread() and io_wqe_worker()Peilin Ye1-5/+0
2022-06-13audit: make is_audit_feature_set() staticXiu Jianfeng1-2/+0
2022-05-17audit,io_uring,io-wq: call __audit_uring_exit for dummy contextsJulian Orth1-1/+1
2021-11-01Merge tag 'audit-pr-20211101' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-0/+11
2021-10-04audit: add OPENAT2 record to list "how" infoRichard Guy Briggs1-0/+10
2021-10-01audit: replace magic audit syscall class numbers with macrosRichard Guy Briggs1-0/+1
2021-09-19audit,io_uring,io-wq: add some basic audit support to io_uringPaul Moore1-0/+26
2020-10-27audit: trigger accompanying records when no rules presentRichard Guy Briggs1-8/+0
2020-07-21audit: purge audit_log_string from the intra-kernel audit APIRichard Guy Briggs1-5/+0
2020-07-08audit: issue CWD record to accompany LSM_AUDIT_DATA_* recordsRichard Guy Briggs1-1/+8
2020-07-01audit: remove unused !CONFIG_AUDITSYSCALL __audit_inode* stubsRichard Guy Briggs1-8/+0
2020-06-29audit: add gfp parameter to audit_log_nfcfgRichard Guy Briggs1-4/+4
2020-06-23audit: log nftables configuration change eventsRichard Guy Briggs1-0/+18
2020-05-07audit: Replace zero-length array with flexible-arrayGustavo A. R. Silva1-1/+1
2020-04-28netfilter: add audit table unregister actionsRichard Guy Briggs1-0/+1
2020-04-28audit: tidy and extend netfilter_cfg x_tablesRichard Guy Briggs1-0/+21
2019-10-03audit: Report suspicious O_CREAT usageKees Cook1-2/+3
2019-08-30kill LOOKUP_NO_EVAL, don't bother including namei.h from audit.hAl Viro1-1/+0
2019-07-21audit_inode(): switch to passing AUDIT_INODE_...Al Viro1-13/+7
2019-07-08Merge tag 'audit-pr-20190702' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-0/+9
2019-05-30treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156Thomas Gleixner1-15/+1
2019-05-21audit: deliver signal_info regarless of syscallRichard Guy Briggs1-0/+9
2019-04-15ntp: Audit NTP parameters adjustmentOndrej Mosnacek1-0/+61
2019-04-15timekeeping: Audit clock adjustmentsOndrej Mosnacek1-0/+14
2019-02-07audit: hide auditsc_get_stamp and audit_serial prototypesRichard Guy Briggs1-9/+0
2019-01-30audit: ignore fcaps on umountRichard Guy Briggs1-5/+10
2019-01-25audit: move loginuid and sessionid from CONFIG_AUDITSYSCALL to CONFIG_AUDITRichard Guy Briggs1-19/+23
2018-11-26audit: use current whenever possiblePaul Moore1-4/+2
2018-11-19audit: localize audit_log_session_info prototypeRichard Guy Briggs1-2/+0
2018-06-19audit: eliminate audit_enabled magic number comparisonRichard Guy Briggs1-1/+4
2018-05-14audit: use inline function to set audit contextRichard Guy Briggs1-0/+7
2018-05-14audit: use inline function to get audit contextRichard Guy Briggs1-3/+12
2018-05-14audit: convert sessionid unset to a macroRichard Guy Briggs1-1/+1
2018-05-08seccomp: Don't special case audited processes when loggingTyler Hicks1-9/+1
2018-05-08seccomp: Audit attempts to modify the actions_logged sysctlTyler Hicks1-0/+5
2018-03-21audit: remove path param from link denied functionRichard Guy Briggs1-4/+2
2017-11-15Merge tag 'audit-pr-20171113' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-8/+0
2017-11-10Audit: remove unused audit_log_secctx functionCasey Schaufler1-8/+0
2017-10-10audit: Record fanotify access control decisionsSteve Grubb1-0/+10
2017-09-22Merge tag 'seccomp-v4.14-rc2' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-5/+1
2017-09-03ipc: mqueue: Replace timespec with timespec64Deepa Dinamani1-3/+3
2017-08-14seccomp: Sysctl to configure actions that are allowed to be loggedTyler Hicks1-5/+1
2017-05-02audit: Use timespec64 to represent audit timestampsDeepa Dinamani1-2/+2
2017-05-02audit: kernel generated netlink traffic should have a portid of 0Paul Moore1-2/+1
2017-02-21Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-0/+32
2017-02-13audit: log module name on init_moduleRichard Guy Briggs1-0/+12
2017-01-18audit: log 32-bit socketcallsRichard Guy Briggs1-0/+20
2016-12-05audit_log_{name,link_denied}: constify struct pathAl Viro1-1/+1
2016-06-27audit: add fields to exclude filter by reusing user filterRichard Guy Briggs1-2/+0
2016-01-27tty: audit: Handle tty audit enable atomicallyPeter Hurley1-0/+4
2016-01-17Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds1-4/+4
2016-01-13audit: force seccomp event logging to honor the audit_enabled flagPaul Moore1-100/+104
2015-12-24security: Make inode argument of inode_getsecid non-constAndreas Gruenbacher1-4/+4
2015-11-04audit: audit_string_contains_control can be booleanYaowei Bai1-1/+1
2015-11-04audit: audit_dummy_context can be booleanYaowei Bai1-3/+3
2015-08-06audit: implement audit by executableRichard Guy Briggs1-0/+1
2015-08-06audit: use macros for unset inode and device valuesRichard Guy Briggs1-0/+3
2015-02-17Merge branch 'getname2' of git://git.kernel.org/pub/scm/linux/kernel/git/viro...Linus Torvalds1-3/+0
2015-02-11Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-1/+0
2015-01-23audit: replace getname()/putname() hacks with reference countersPaul Moore1-3/+0
2015-01-20audit: remove vestiges of vers_opsRichard Guy Briggs1-1/+0
2014-12-23Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-0/+4
2014-12-23audit: restore AUDIT_LOGINUID unset ABIRichard Guy Briggs1-0/+4
2014-11-19new helper: audit_file()Al Viro1-0/+9
2014-10-22audit: Remove "weak" from audit_classify_compat_syscall() declarationBjorn Helgaas1-1/+1
2014-09-23audit: use union for audit_field values since they are mutually exclusiveRichard Guy Briggs1-5/+9
2014-09-23audit: x86: drop arch from __audit_syscall_entry() interfaceRichard Guy Briggs1-3/+2
2014-09-23audit: fix build error when asm/syscall.h does not existEric Paris1-1/+2
2014-09-23ARCH: AUDIT: audit_syscall_entry() should not require the archEric Paris1-3/+4
2014-04-10AUDIT: make audit_is_compat depend on CONFIG_AUDIT_COMPAT_GENERICChris Metcalf1-1/+1
2014-03-24audit: define audit_is_compat in kernel internal headerEric Paris1-0/+6
2014-03-20audit: Add generic compat syscall supportAKASHI Takahiro1-0/+8
2014-03-20audit: Send replies in the proper network namespace.Eric W. Biederman1-1/+2
2014-01-14audit: Convert int limit uses to u32Joe Perches1-1/+1
2014-01-13audit: correct a type mismatch in audit_syscall_exit()AKASHI Takahiro1-1/+1
2014-01-13audit: refactor audit_receive_msg() to clarify AUDIT_*_RULE* casesRichard Guy Briggs1-1/+3
2014-01-13audit: fix incorrect type of sessionidRichard Guy Briggs1-2/+2
2014-01-13audit: fix netlink portid naming and typesRichard Guy Briggs1-1/+1
2014-01-13audit: Simplify and correct audit_log_capsetEric W. Biederman1-5/+5
2013-11-05audit: call audit_bprm() only once to add AUDIT_EXECVE informationRichard Guy Briggs1-6/+3
2013-11-05audit: move audit_aux_data_execve contents into audit_context unionRichard Guy Briggs1-2/+2
2013-11-05audit: implement generic feature setting and retrievingEric Paris1-0/+2
2013-07-09audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_...Jeff Layton1-4/+22
2013-05-07audit: Make testing for a valid loginuid explicit.Eric W. Biederman1-0/+5
2013-04-30audit: fix event coverage of AUDIT_ANOM_LINKEric Paris1-9/+11
2013-04-30helper for some session id stuffEric Paris1-0/+2
2013-04-30audit: use a consistent audit helper to log lsm informationEric Paris1-3/+5
2013-04-30audit: stop pushing loginid, uid, sessionid as argumentsEric Paris1-2/+1
2013-04-16audit: allow checking the type of audit message in the user filterEric Paris1-1/+1
2013-04-10kernel: audit: beautify code, for extern function, better to check its parame...Chen Gang1-5/+11
2013-04-10audit: Syscall rules are not applied to existing processes on non-x86Anton Blanchard1-1/+1
2013-01-11linux/audit.h: move ptrace.h include to kernel headerMike Frysinger1-0/+1
2013-01-11audit: create explicit AUDIT_SECCOMP event typeKees Cook1-1/+2
2012-10-13UAPI: (Scripted) Disintegrate include/linuxDavid Howells1-380/+1
2012-10-13Merge tag 'for-3.7' of git://openrisc.net/jonas/linuxLinus Torvalds1-0/+1
2012-10-12audit: make audit_inode take struct filenameJeff Layton1-4/+6
2012-10-12audit: allow audit code to satisfy getname requests from its names_listJeff Layton1-0/+11
2012-10-12vfs: define struct filename and have getname() return itJeff Layton1-5/+7
2012-10-12audit: overhaul __audit_inode_child to accomodate retryingJeff Layton1-5/+11
2012-10-12audit: set the name_len in audit_inode for parent lookupsJeff Layton1-5/+10
2012-10-12audit: add a new "type" field to audit_names structJeff Layton1-0/+5
2012-10-12audit: reverse arguments to audit_inode_childJeff Layton1-9/+9
2012-10-06audit.h: replace defines with C stubsKees Cook1-53/+153
2012-10-02Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds1-0/+2
2012-09-21audit: define AUDIT_ARCH_OPENRISCKees Cook1-0/+1
2012-09-17userns: Convert the audit loginuid to be a kuidEric W. Biederman1-3/+3
2012-09-17audit: Add typespecific uid and gid comparatorsEric W. Biederman1-0/+2
2012-09-17audit: Remove the unused uid parameter from audit_receive_filterEric W. Biederman1-1/+1
2012-09-17audit: Use current instead of NETLINK_CREDS() in audit_filterEric W. Biederman1-1/+1
2012-09-12audit: export audit_log_task_infoPeter Moody1-0/+2
2012-07-29fs: add link restriction audit reportingKees Cook1-0/+4
2012-04-14seccomp: remove duplicated failure loggingKees Cook1-4/+4
2012-03-20constify path argument of audit_log_d_path()Al Viro1-1/+1
2012-01-17audit: comparison on interprocess fieldsPeter Moody1-1/+23
2012-01-17audit: implement all object interfield comparisonsPeter Moody1-1/+9
2012-01-17audit: allow interfield comparison between gid and ogidEric Paris1-1/+2
2012-01-17audit: allow interfield comparison in audit rulesEric Paris1-0/+4
2012-01-17audit: remove task argument to audit_set_loginuidEric Paris1-1/+1
2012-01-17audit: allow audit matching on inode gidEric Paris1-0/+1
2012-01-17audit: allow matching on obj_uidEric Paris1-0/+1
2012-01-17audit: remove audit_finish_fork as it can't be calledEric Paris1-2/+0
2012-01-17audit: inline audit_free to simplify the look of generic codeEric Paris1-1/+6
2012-01-17audit: drop audit_set_macxattr as it doesn't do anythingEric Paris1-2/+0
2012-01-17audit: inline checks for not needing to collect aux recordsEric Paris1-3/+20
2012-01-17audit: inline audit_syscall_entry to reduce burden on archsEric Paris1-3/+10
2012-01-17Audit: push audit success and retcode into arch ptrace.hEric Paris1-8/+14
2012-01-17seccomp: audit abnormal end to a process due to seccompEric Paris1-0/+8
2012-01-03switch kern_ipc_perm to umode_tAl Viro1-2/+2
2012-01-03switch mq_open() to umode_tAl Viro1-2/+2
2011-10-31treewide: use __printf not __attribute__((format(printf,...)))Joe Perches1-6/+5
2011-06-30netfilter: add SELinux context support to AUDIT targetMr Dash Four1-0/+7
2011-01-19Merge branch 'master' of /repos/git/net-next-2.6Patrick McHardy1-0/+1
2011-01-16netfilter: create audit records for x_tables replacesThomas Graf1-0/+1
2011-01-16netfilter: audit target to record accepted/dropped packetsThomas Graf1-0/+1
2011-01-10headers: path.h reduxAlexey Dobriyan1-0/+1
2010-10-30audit mmapAl Viro1-0/+9
2010-08-07gcc-4.6: fs: fix unused but set warningsAndi Kleen1-1/+1
2010-02-08Lose the first argument of audit_inode_child()Al Viro1-6/+5
2009-06-24Audit: clean up all op= output to include string quotingEric Paris1-0/+3
2009-02-12integrity: audit updateMimi Zohar1-1/+3
2009-02-06Merge branch 'master' into nextJames Morris1-50/+48
2009-02-06integrity: IMA as an integrity service providerMimi Zohar1-0/+5
2009-01-04audit: validate comparison operations, store them in sane formAl Viro1-0/+12
2009-01-04audit rules ordering, part 2Al Viro1-0/+1
2009-01-04fixing audit rule ordering mess, part 1Al Viro1-0/+1
2009-01-04sanitize audit_log_capset()Al Viro1-5/+4
2009-01-04sanitize audit_fd_pair()Al Viro1-5/+4
2009-01-04sanitize audit_mq_open()Al Viro1-5/+4
2009-01-04sanitize AUDIT_MQ_SENDRECVAl Viro1-13/+4
2009-01-04sanitize audit_mq_notify()Al Viro1-5/+4
2009-01-04sanitize audit_mq_getsetattr()Al Viro1-5/+4
2009-01-04sanitize audit_ipc_set_perm()Al Viro1-5/+4
2009-01-04sanitize audit_ipc_obj()Al Viro1-5/+4
2009-01-04sanitize audit_socketcallAl Viro1-2/+2
2008-12-25Merge branch 'next' into for-linusJames Morris1-0/+26
2008-12-09[PATCH] fix broken timestamps in AVC generated by kernel threadsAl Viro1-2/+2
2008-12-09[PATCH] return records for fork() both to child and parentAl Viro1-0/+2
2008-11-14CRED: Make execve() take advantage of copy-on-write credentialsDavid Howells1-16/+0
2008-11-14CRED: Inaugurate COW credentialsDavid Howells1-8/+14
2008-11-11When the capset syscall is used it is not possible for audit to record theEric Paris1-0/+10
2008-11-11Any time fcaps or a setuid app under SECURE_NOROOT is used to result in aEric Paris1-0/+26
2008-07-24remove the v850 portAdrian Bunk1-1/+0
2008-06-24[PATCH] remove useless argument type in audit_filter_user()Peng Haitao1-1/+1
2008-04-28[PATCH] new predicate - AUDIT_FILETYPEAl Viro1-0/+1
2008-04-28Audit: increase the maximum length of the key fieldEric Paris1-1/+1
2008-04-28Audit: standardize string audit interfacesEric Paris1-8/+14
2008-04-28Audit: collect sessionid in netlink messagesEric Paris1-1/+2
2008-04-19Audit: Final renamings and cleanupAhmed S. Darwish1-2/+2
2008-04-19SELinux: use new audit hooks, remove redundant exportsAhmed S. Darwish1-0/+29
2008-02-14d_path: Use struct path in struct avc_audit_dataJan Blunck1-3/+2
2008-02-01[AUDIT] break large execve argument logging into smaller messagesEric Paris1-2/+4
2008-02-01[AUDIT] Add End of Event recordEric Paris1-0/+1
2008-02-01[AUDIT] add session id to audit messagesEric Paris1-0/+2
2008-02-01[PATCH] get rid of loginuid racesAl Viro1-1/+1
2008-02-01[PATCH] switch audit_get_loginuid() to task_struct *Al Viro1-2/+2
2008-01-30NetLabel: Add auditing to the static labeling mechanismPaul Moore1-0/+2
2007-10-21[PATCH] audit: watching subtreesAl Viro1-0/+3
2007-10-21[PATCH] pass dentry to audit_inode()/audit_inode_child()Al Viro1-8/+8
2007-10-10[XFRM]: xfrm audit callsJoy Latten1-4/+5
2007-08-23Renumber AUDIT_TTY_[GS]ETMiloslav Trmac1-2/+2
2007-07-22[PATCH] get rid of AVC_PATH postponed treatmentAl Viro1-2/+0
2007-07-22[PATCH] allow audit filtering on bit & operationsEric Paris1-13/+17
2007-07-16Audit: add TTY input auditingMiloslav Trmac1-0/+11
2007-05-11[PATCH] Abnormal End of ProcessesSteve Grubb1-0/+3
2007-05-11[PATCH] complete message queue auditingAmy Griffis1-7/+0
2007-05-11[PATCH] audit signal recipientsAmy Griffis1-0/+3
2007-05-11[PATCH] add SIGNAL syscall class (v3)Amy Griffis1-0/+2
2007-05-11[PATCH] auditing ptraceAl Viro1-0/+10
2007-03-06[PATCH] linux/audit.h needs linux/types.hJeff Dike1-0/+1
2007-02-17[PATCH] AUDIT_FD_PAIRAl Viro1-0/+9
2006-12-06audit: Add auditing to ipsecJoy Latten1-0/+6
2006-10-04[PATCH] message types updatedSteve Grubb1-1/+2
2006-09-29[NetLabel]: audit fixups due to delayed feedbackPaul Moore1-6/+5
2006-09-28[NetLabel]: add audit support for configuration changesPaul Moore1-0/+6