aboutsummaryrefslogtreecommitdiffstats
path: root/kernel/auditsc.c
AgeCommit message (Expand)AuthorFilesLines
2012-01-23kernel-doc: fix new warnings in auditsc.cRandy Dunlap1-2/+3
2012-01-17audit: no leading space in audit_log_d_path prefixKees Cook1-3/+3
2012-01-17audit: fix signedness bug in audit_log_execve_info()Xi Wang1-2/+2
2012-01-17audit: comparison on interprocess fieldsPeter Moody1-0/+39
2012-01-17audit: implement all object interfield comparisonsPeter Moody1-0/+29
2012-01-17audit: allow interfield comparison between gid and ogidEric Paris1-0/+6
2012-01-17audit: complex interfield comparison helperEric Paris1-11/+39
2012-01-17audit: allow interfield comparison in audit rulesEric Paris1-1/+29
2012-01-17audit: do not call audit_getname on errorEric Paris1-3/+0
2012-01-17audit: only allow tasks to set their loginuid if it is -1Eric Paris1-1/+10
2012-01-17audit: remove task argument to audit_set_loginuidEric Paris1-3/+3
2012-01-17audit: allow audit matching on inode gidEric Paris1-0/+12
2012-01-17audit: allow matching on obj_uidEric Paris1-0/+12
2012-01-17audit: remove audit_finish_fork as it can't be calledEric Paris1-20/+0
2012-01-17audit: inline audit_free to simplify the look of generic codeEric Paris1-1/+1
2012-01-17audit: inline checks for not needing to collect aux recordsEric Paris1-12/+3
2012-01-17audit: drop some potentially inadvisable likely notationsEric Paris1-6/+6
2012-01-17audit: inline audit_syscall_entry to reduce burden on archsEric Paris1-1/+1
2012-01-17Audit: push audit success and retcode into arch ptrace.hEric Paris1-4/+12
2012-01-17seccomp: audit abnormal end to a process due to seccompEric Paris1-21/+29
2012-01-17audit: check current inode and containing object when filtering on major and ...Eric Paris1-10/+14
2012-01-17audit: dynamically allocate audit_names when not enough space is in the names...Eric Paris1-188/+215
2012-01-17audit: make filetype matching consistent with other filtersEric Paris1-10/+9
2012-01-03auditsc: propage umode_tAl Viro1-2/+2
2012-01-03switch kern_ipc_perm to umode_tAl Viro1-5/+5
2012-01-03switch mq_open() to umode_tAl Viro1-3/+3
2011-10-31kernel: Map most files to use export.h instead of module.hPaul Gortmaker1-1/+1
2011-07-26atomic: use <linux/atomic.h>Arun Sharma1-1/+1
2011-04-27audit: acquire creds selectively to reduce atomic op overheadTony Jones1-10/+17
2011-03-31Fix common misspellingsLucas De Marchi1-1/+1
2010-10-30audit mmapAl Viro1-0/+16
2010-08-11vfs: add helpers to get root and pwdMiklos Szeredi1-7/+2
2010-07-28fsnotify: rename fsnotify_mark_entry to just fsnotify_markEric Paris1-2/+2
2010-07-28inotify: remove inotify in kernel interfaceEric Paris1-1/+0
2010-07-28audit: reimplement audit_trees using fsnotify rather than inotifyEric Paris1-2/+2
2010-07-28Audit: clean up the audit_watch splitEric Paris1-3/+2
2010-04-05audit: preface audit printk with auditEric Paris1-1/+1
2010-03-30include cleanup: Update gfp.h and slab.h includes to prepare for breaking imp...Tejun Heo1-0/+1
2010-02-08Lose the first argument of audit_inode_child()Al Viro1-5/+2
2009-12-22Sanitize f_flags helpersAl Viro1-1/+0
2009-09-24Audit: rearrange audit_context to save 16 bytes per structEric Paris1-3/+3
2009-06-24Fix rule eviction order for AUDIT_DIRAl Viro1-0/+15
2009-06-24Audit: clean up all op= output to include string quotingEric Paris1-6/+2
2009-06-23audit: seperate audit inode watches into a subfileEric Paris1-3/+3
2009-06-23Audit: better estimation of execve record lengthEric Paris1-2/+2
2009-04-05Audit: remove spaces from audit_log_d_pathEric Paris1-1/+1
2009-04-05audit: audit_set_auditable defined but not usedEric Paris1-8/+8
2009-04-05audit: Fix possible return value truncation in audit_get_context()Paul Moore1-1/+1
2009-04-05auditsc: fix kernel-doc notationRandy Dunlap1-2/+2
2009-04-05audit: EXECVE record - removed bogus newlineJiri Pirko1-5/+4
2009-03-31Get rid of indirect include of fs_struct.hAl Viro1-0/+1
2009-01-04make sure that filterkey of task,always rules is reportedAl Viro1-4/+11
2009-01-04fixing audit rule ordering mess, part 1Al Viro1-36/+43
2009-01-04sanitize audit_log_capset()Al Viro1-28/+16
2009-01-04sanitize audit_fd_pair()Al Viro1-30/+14
2009-01-04sanitize audit_mq_open()Al Viro1-42/+23
2009-01-04sanitize AUDIT_MQ_SENDRECVAl Viro1-98/+29
2009-01-04sanitize audit_mq_notify()Al Viro1-40/+16
2009-01-04sanitize audit_mq_getsetattr()Al Viro1-37/+17
2009-01-04sanitize audit_ipc_set_perm()Al Viro1-33/+26
2009-01-04sanitize audit_ipc_obj()Al Viro1-51/+37
2009-01-04sanitize audit_socketcallAl Viro1-28/+38
2009-01-04don't reallocate buffer in every audit_sockaddr()Al Viro1-24/+22
2008-12-25Merge branch 'next' into for-linusJames Morris1-29/+226
2008-12-09[PATCH] fix broken timestamps in AVC generated by kernel threadsAl Viro1-1/+4
2008-12-09[patch 1/1] audit: remove excess kernel-docRandy Dunlap1-2/+0
2008-12-09[PATCH] return records for fork() both to child and parentAl Viro1-0/+17
2008-11-14CRED: Inaugurate COW credentialsDavid Howells1-21/+21
2008-11-14CRED: Use RCU to access another task's creds and to release a task's own credsDavid Howells1-14/+19
2008-11-14CRED: Separate task security context from task_structDavid Howells1-25/+27
2008-11-14CRED: Wrap task credential accesses in the core kernelDavid Howells1-2/+4
2008-11-11When the capset syscall is used it is not possible for audit to record theEric Paris1-0/+48
2008-11-11Any time fcaps or a setuid app under SECURE_NOROOT is used to result in aEric Paris1-0/+68
2008-11-11This patch will print cap_permitted and cap_inheritable data in the PATHEric Paris1-5/+77
2008-10-13tty: Fix abusers of current->sighand->ttyAlan Cox1-5/+4
2008-09-01[PATCH] audit: Moved variable declaration to beginning of functionCordelia1-1/+2
2008-08-04Re: [PATCH] Fix the kernel panic of audit_filter_task when key field is setzhangxiliang1-0/+7
2008-08-01[PATCH] Fix the kernel panic of audit_filter_task when key field is setzhangxiliang1-1/+1
2008-08-01[PATCH] Audit: Collect signal info when SIGUSR2 is sent to auditdEric Paris1-1/+1
2008-07-23x86_64 syscall audit fast-pathRoland McGrath1-1/+2
2008-04-28[PATCH] new predicate - AUDIT_FILETYPEAl Viro1-0/+16
2008-04-28[PATCH 2/2] audit: fix sparse shadowed variable warningsHarvey Harrison1-2/+0
2008-04-28[PATCH 1/2] audit: move extern declarations to audit.hHarvey Harrison1-6/+0
2008-04-28Audit: standardize string audit interfacesEric Paris1-4/+4
2008-04-28Audit: end printk with newlineEric Paris1-4/+4
2008-04-19Audit: Final renamings and cleanupAhmed S. Darwish1-6/+6
2008-04-19Audit: internally use the new LSM audit hooksAhmed S. Darwish1-5/+4
2008-04-19Audit: use new LSM hooks instead of SELinux exportsAhmed S. Darwish1-26/+29
2008-03-01[PATCH] Audit: Fix the format type for size_t variablesPaul Moore1-1/+1
2008-02-18Audit: use == not = in if statementsEric Paris1-1/+4
2008-02-14d_path: Use struct path in struct avc_audit_dataJan Blunck1-17/+11
2008-02-14Use struct path in fs_structJan Blunck1-2/+2
2008-02-01[AUDIT] create context if auditing was ever enabledEric Paris1-1/+2
2008-02-01[AUDIT] break large execve argument logging into smaller messagesEric Paris1-40/+165
2008-02-01[AUDIT] do not panic on exclude messages in audit_log_pid_context()Eric Paris1-1/+1
2008-02-01[AUDIT] Add End of Event recordEric Paris1-0/+5
2008-02-01[AUDIT] add session id to audit messagesEric Paris1-9/+27
2008-02-01[AUDIT] collect uid, loginuid, and comm in OBJ_PID recordsEric Paris1-5/+27
2008-02-01[AUDIT] return EINTR not ERESTART*Eric Paris1-1/+18
2008-02-01[PATCH] get rid of loginuid racesAl Viro1-41/+15
2008-02-01[PATCH] switch audit_get_loginuid() to task_struct *Al Viro1-2/+3
2007-10-22auditsc: fix kernel-doc param warningsRandy Dunlap1-2/+2
2007-10-21[PATCH] audit: watching subtreesAl Viro1-1/+220
2007-10-21[PATCH] pass dentry to audit_inode()/audit_inode_child()Al Viro1-2/+4
2007-10-18whitespace fixes: syscall auditingDaniel Walker1-5/+5
2007-10-17Clean up duplicate includes in kernel/Jesper Juhl1-1/+0
2007-10-09SUNRPC: Convert rpc_pipefs to use the generic filesystem notification hooksTrond Myklebust1-0/+1
2007-08-22kernel/auditsc.c: fix an off-by-oneAdrian Bunk1-1/+1
2007-08-07fix oops in __audit_signal_info()Al Viro1-11/+11
2007-07-28audit: fix two bugs in the new execve audit codePeter Zijlstra1-2/+4
2007-07-22[PATCH] get rid of AVC_PATH postponed treatmentAl Viro1-47/+0
2007-07-22[PATCH] Make IPC mode consistentSteve Grubb1-2/+2
2007-07-19mm: variable length argument supportOllie Wild1-1/+1
2007-07-19audit: rework execve auditPeter Zijlstra1-21/+63
2007-07-16kerneldoc fix in audit_core_dumpsHenrik Kretzschmar1-1/+1
2007-07-16Audit: add TTY input auditingMiloslav Trmac1-3/+0
2007-05-11[PATCH] Abnormal End of ProcessesSteve Grubb1-0/+39
2007-05-11[PATCH] match audit name dataAmy Griffis1-58/+84
2007-05-11[PATCH] complete message queue auditingAmy Griffis1-27/+0
2007-05-11[PATCH] initialize name osidAmy Griffis1-0/+1
2007-05-11[PATCH] audit signal recipientsAmy Griffis1-19/+92
2007-05-11[PATCH] auditing ptraceAl Viro1-0/+29
2007-03-14[PATCH] fix deadlock in audit_log_task_context()Al Viro1-13/+11
2007-02-17[PATCH] AUDIT_FD_PAIRAl Viro1-0/+40
2006-12-08[PATCH] struct path: convert kernelJosef Sipek1-2/+2
2006-12-08[PATCH] tty: ->signal->tty lockingPeter Zijlstra1-0/+2
2006-12-06audit: Add auditing to ipsecJoy Latten1-1/+5
2006-12-04[PATCH] severing skbuff.h -> highmem.hAl Viro1-0/+1
2006-10-04[PATCH] name_count array overrunSteve Grubb1-2/+17
2006-10-04[PATCH] PPID filtering fixAlexander Viro1-2/+7
2006-09-29[PATCH] audit/accounting: tty lockingAlan Cox1-0/+5
2006-09-26[PATCH] selinux: rename selinux_ctxid_to_stringStephen Smalley1-2/+2
2006-09-26[PATCH] selinux: eliminate selinux_task_ctxidStephen Smalley1-1/+1
2006-09-11[PATCH] audit: AUDIT_PERM supportAl Viro1-0/+51
2006-08-03[PATCH] take filling ->pid, etc. out of audit_get_context()Al Viro1-11/+12
2006-08-03[PATCH] don't bother with aux entires for dummy contextAl Viro1-3/+3
2006-08-03[PATCH] mark context of syscall entered with no rules as dummyAl Viro1-2/+4
2006-08-03[PATCH] introduce audit rules counterAl Viro1-0/+3
2006-08-03[PATCH] fix missed create event for directory auditAmy Griffis1-3/+13
2006-08-03[PATCH] fix faulty inode data collection for open() with O_CREATAmy Griffis1-22/+41
2006-07-01[PATCH] audit: support for object context filtersDarrel Goeddel1-0/+40
2006-07-01[PATCH] audit: rename AUDIT_SE_* constantsDarrel Goeddel1-5/+5
2006-07-01[PATCH] add rule filterkeyAmy Griffis1-0/+15
2006-06-27[PATCH] Remove redundant NULL checks before [kv]free - in kernel/Jesper Juhl1-2/+1
2006-06-27[PATCH] fix kernel-doc in kernel/ dirRandy Dunlap1-4/+3
2006-06-23[PATCH] Doc: add audit & acct to DocBookRandy Dunlap1-0/+1
2006-06-20[PATCH] make set_loginuid obey audit_enabledSteve Grubb1-11/+16
2006-06-20[PATCH] log more info for directory entry change eventsAmy Griffis1-54/+69
2006-06-20[PATCH] audit: path-based rulesAmy Griffis1-36/+88
2006-06-20[PATCH] Audit of POSIX Message Queue Syscalls v.2George C. Wilson1-1/+273
2006-06-20[PATCH] deprecate AUDIT_POSSBILEAl Viro1-1/+0
2006-06-20[PATCH] inline more audit helpersAl Viro1-10/+4
2006-06-20[PATCH] update of IPC audit record cleanupLinda Knippers1-17/+5
2006-06-20[PATCH] add filtering by ppidAl Viro1-0/+4
2006-06-20[PATCH] log ppidAl Viro1-2/+5
2006-06-20[PATCH] collect sid of those who send signals to auditdAl Viro1-11/+12
2006-06-20[PATCH] execve argument loggingAl Viro1-0/+51
2006-05-01[PATCH] Audit Filter PerformanceSteve Grubb1-4/+7
2006-05-01[PATCH] Rework of IPC auditingSteve Grubb1-3/+51
2006-05-01[PATCH] More user space subject labelsSteve Grubb1-2/+2
2006-05-01[PATCH] change lspp ipc auditingSteve Grubb1-47/+21
2006-05-01[PATCH] audit inode patchSteve Grubb1-37/+16
2006-05-01[PATCH] support for context based audit filtering, part 2Darrel Goeddel1-0/+20
2006-05-01[PATCH] no need to wank with task_lock() and pinning task down in audit_sysca...Al Viro1-9/+1
2006-05-01[PATCH] drop task argument of audit_syscall_{entry,exit}Al Viro1-4/+4
2006-05-01[PATCH] drop gfp_mask in audit_log_exit()Al Viro1-30/+32
2006-05-01[PATCH] move call of audit_free() into do_exit()Al Viro1-8/+1
2006-05-01[PATCH] deal with deadlocks in audit_free()Al Viro1-10/+10
2006-03-25Merge branch 'audit.b3' of git://git.kernel.org/pub/scm/linux/kernel/git/viro...Linus Torvalds1-400/+434
2006-03-20[PATCH] simplify audit_free() lockingIngo Molnar1-3/+7
2006-03-20[PATCH] Add tty to syscall audit recordsSteve Grubb1-2/+8
2006-03-20[PATCH] audit string fields interface + consumerAmy Griffis1-26/+24
2006-03-20[PATCH] Fix audit record filtering with !CONFIG_AUDITSYSCALLDavid Woodhouse1-376/+4
2006-03-20[PATCH] Miscellaneous bug and warning fixesDustin Kirkland1-9/+12
2006-03-20[PATCH] Capture selinux subject/object context information.Dustin Kirkland1-8/+134
2006-03-20[PATCH] Exclude messages by message typeDustin Kirkland1-1/+34
2006-03-20[PATCH] Collect more inode information during syscall processing.Amy Griffis1-24/+118
2006-03-20[PATCH] Pass dentry, not just name, in fsnotify creation hooks.Amy Griffis1-1/+1
2006-03-20[PATCH] Filter rule comparatorsDustin Kirkland1-42/+75
2006-03-20[PATCH] AUDIT: kerneldoc for kernel/audit*.cRandy Dunlap1-18/+132
2006-03-20[PATCH] make vm86 call audit_syscall_exitJason Baron1-5/+0
2006-02-24Merge ../powerpc-mergePaul Mackerras1-3/+3
2006-02-18[PATCH] GFP_KERNEL allocations in atomic (auditsc)Al Viro1-3/+3
2006-02-10[PATCH] powerpc: trivial: modify comments to refer to new location of filesJon Mason1-1/+1
2006-01-18[PATCH] EDAC: atomic scrub operationsAlan Cox1-1/+1
2005-10-28[PATCH] gfp_t: kernel/*Al Viro1-1/+1
2005-08-27[AUDIT] Allow filtering on system call success _or_ failureDavid Woodhouse1-2/+6
2005-08-17AUDIT: Prevent duplicate syscall rulesAmy Griffis1-39/+56
2005-08-17AUDIT: Speed up audit_filter_syscall() for the non-auditable case.David Woodhouse1-10/+12
2005-08-17AUDIT: Fix task refcount leak in audit_filter_syscall()David Woodhouse1-1/+2
2005-07-18AUDIT: Reduce contention in audit_serial()David Woodhouse1-1/+3
2005-07-14AUDIT: Fix compile error in audit_filter_syscallDavid Woodhouse1-1/+1
2005-07-13AUDIT: Avoid scheduling in idle threadDavid Woodhouse1-5/+8
2005-07-13AUDIT: Exempt the whole auditd thread-group from auditingDavid Woodhouse1-2/+2
2005-07-02AUDIT: Really don't audit auditd.David Woodhouse1-2/+2
2005-06-24AUDIT: Clean up user message filteringDavid Woodhouse1-14/+42
2005-06-24AUDIT: Return correct result from audit_filter_rules()David Woodhouse1-1/+1
2005-06-23AUDIT: No really, we don't want to audit auditd.David Woodhouse1-1/+1
2005-06-22AUDIT: Wait for backlog to clear when generating messages.David Woodhouse1-7/+7
2005-06-22AUDIT: Optimise the audit-disabled case for discarding user messagesDavid Woodhouse1-5/+16