Age | Commit message (Expand) | Author | Files | Lines |
2012-01-23 | kernel-doc: fix new warnings in auditsc.c | Randy Dunlap | 1 | -2/+3 |
2012-01-17 | audit: no leading space in audit_log_d_path prefix | Kees Cook | 1 | -3/+3 |
2012-01-17 | audit: fix signedness bug in audit_log_execve_info() | Xi Wang | 1 | -2/+2 |
2012-01-17 | audit: comparison on interprocess fields | Peter Moody | 1 | -0/+39 |
2012-01-17 | audit: implement all object interfield comparisons | Peter Moody | 1 | -0/+29 |
2012-01-17 | audit: allow interfield comparison between gid and ogid | Eric Paris | 1 | -0/+6 |
2012-01-17 | audit: complex interfield comparison helper | Eric Paris | 1 | -11/+39 |
2012-01-17 | audit: allow interfield comparison in audit rules | Eric Paris | 1 | -1/+29 |
2012-01-17 | audit: do not call audit_getname on error | Eric Paris | 1 | -3/+0 |
2012-01-17 | audit: only allow tasks to set their loginuid if it is -1 | Eric Paris | 1 | -1/+10 |
2012-01-17 | audit: remove task argument to audit_set_loginuid | Eric Paris | 1 | -3/+3 |
2012-01-17 | audit: allow audit matching on inode gid | Eric Paris | 1 | -0/+12 |
2012-01-17 | audit: allow matching on obj_uid | Eric Paris | 1 | -0/+12 |
2012-01-17 | audit: remove audit_finish_fork as it can't be called | Eric Paris | 1 | -20/+0 |
2012-01-17 | audit: inline audit_free to simplify the look of generic code | Eric Paris | 1 | -1/+1 |
2012-01-17 | audit: inline checks for not needing to collect aux records | Eric Paris | 1 | -12/+3 |
2012-01-17 | audit: drop some potentially inadvisable likely notations | Eric Paris | 1 | -6/+6 |
2012-01-17 | audit: inline audit_syscall_entry to reduce burden on archs | Eric Paris | 1 | -1/+1 |
2012-01-17 | Audit: push audit success and retcode into arch ptrace.h | Eric Paris | 1 | -4/+12 |
2012-01-17 | seccomp: audit abnormal end to a process due to seccomp | Eric Paris | 1 | -21/+29 |
2012-01-17 | audit: check current inode and containing object when filtering on major and ... | Eric Paris | 1 | -10/+14 |
2012-01-17 | audit: dynamically allocate audit_names when not enough space is in the names... | Eric Paris | 1 | -188/+215 |
2012-01-17 | audit: make filetype matching consistent with other filters | Eric Paris | 1 | -10/+9 |
2012-01-03 | auditsc: propage umode_t | Al Viro | 1 | -2/+2 |
2012-01-03 | switch kern_ipc_perm to umode_t | Al Viro | 1 | -5/+5 |
2012-01-03 | switch mq_open() to umode_t | Al Viro | 1 | -3/+3 |
2011-10-31 | kernel: Map most files to use export.h instead of module.h | Paul Gortmaker | 1 | -1/+1 |
2011-07-26 | atomic: use <linux/atomic.h> | Arun Sharma | 1 | -1/+1 |
2011-04-27 | audit: acquire creds selectively to reduce atomic op overhead | Tony Jones | 1 | -10/+17 |
2011-03-31 | Fix common misspellings | Lucas De Marchi | 1 | -1/+1 |
2010-10-30 | audit mmap | Al Viro | 1 | -0/+16 |
2010-08-11 | vfs: add helpers to get root and pwd | Miklos Szeredi | 1 | -7/+2 |
2010-07-28 | fsnotify: rename fsnotify_mark_entry to just fsnotify_mark | Eric Paris | 1 | -2/+2 |
2010-07-28 | inotify: remove inotify in kernel interface | Eric Paris | 1 | -1/+0 |
2010-07-28 | audit: reimplement audit_trees using fsnotify rather than inotify | Eric Paris | 1 | -2/+2 |
2010-07-28 | Audit: clean up the audit_watch split | Eric Paris | 1 | -3/+2 |
2010-04-05 | audit: preface audit printk with audit | Eric Paris | 1 | -1/+1 |
2010-03-30 | include cleanup: Update gfp.h and slab.h includes to prepare for breaking imp... | Tejun Heo | 1 | -0/+1 |
2010-02-08 | Lose the first argument of audit_inode_child() | Al Viro | 1 | -5/+2 |
2009-12-22 | Sanitize f_flags helpers | Al Viro | 1 | -1/+0 |
2009-09-24 | Audit: rearrange audit_context to save 16 bytes per struct | Eric Paris | 1 | -3/+3 |
2009-06-24 | Fix rule eviction order for AUDIT_DIR | Al Viro | 1 | -0/+15 |
2009-06-24 | Audit: clean up all op= output to include string quoting | Eric Paris | 1 | -6/+2 |
2009-06-23 | audit: seperate audit inode watches into a subfile | Eric Paris | 1 | -3/+3 |
2009-06-23 | Audit: better estimation of execve record length | Eric Paris | 1 | -2/+2 |
2009-04-05 | Audit: remove spaces from audit_log_d_path | Eric Paris | 1 | -1/+1 |
2009-04-05 | audit: audit_set_auditable defined but not used | Eric Paris | 1 | -8/+8 |
2009-04-05 | audit: Fix possible return value truncation in audit_get_context() | Paul Moore | 1 | -1/+1 |
2009-04-05 | auditsc: fix kernel-doc notation | Randy Dunlap | 1 | -2/+2 |
2009-04-05 | audit: EXECVE record - removed bogus newline | Jiri Pirko | 1 | -5/+4 |
2009-03-31 | Get rid of indirect include of fs_struct.h | Al Viro | 1 | -0/+1 |
2009-01-04 | make sure that filterkey of task,always rules is reported | Al Viro | 1 | -4/+11 |
2009-01-04 | fixing audit rule ordering mess, part 1 | Al Viro | 1 | -36/+43 |
2009-01-04 | sanitize audit_log_capset() | Al Viro | 1 | -28/+16 |
2009-01-04 | sanitize audit_fd_pair() | Al Viro | 1 | -30/+14 |
2009-01-04 | sanitize audit_mq_open() | Al Viro | 1 | -42/+23 |
2009-01-04 | sanitize AUDIT_MQ_SENDRECV | Al Viro | 1 | -98/+29 |
2009-01-04 | sanitize audit_mq_notify() | Al Viro | 1 | -40/+16 |
2009-01-04 | sanitize audit_mq_getsetattr() | Al Viro | 1 | -37/+17 |
2009-01-04 | sanitize audit_ipc_set_perm() | Al Viro | 1 | -33/+26 |
2009-01-04 | sanitize audit_ipc_obj() | Al Viro | 1 | -51/+37 |
2009-01-04 | sanitize audit_socketcall | Al Viro | 1 | -28/+38 |
2009-01-04 | don't reallocate buffer in every audit_sockaddr() | Al Viro | 1 | -24/+22 |
2008-12-25 | Merge branch 'next' into for-linus | James Morris | 1 | -29/+226 |
2008-12-09 | [PATCH] fix broken timestamps in AVC generated by kernel threads | Al Viro | 1 | -1/+4 |
2008-12-09 | [patch 1/1] audit: remove excess kernel-doc | Randy Dunlap | 1 | -2/+0 |
2008-12-09 | [PATCH] return records for fork() both to child and parent | Al Viro | 1 | -0/+17 |
2008-11-14 | CRED: Inaugurate COW credentials | David Howells | 1 | -21/+21 |
2008-11-14 | CRED: Use RCU to access another task's creds and to release a task's own creds | David Howells | 1 | -14/+19 |
2008-11-14 | CRED: Separate task security context from task_struct | David Howells | 1 | -25/+27 |
2008-11-14 | CRED: Wrap task credential accesses in the core kernel | David Howells | 1 | -2/+4 |
2008-11-11 | When the capset syscall is used it is not possible for audit to record the | Eric Paris | 1 | -0/+48 |
2008-11-11 | Any time fcaps or a setuid app under SECURE_NOROOT is used to result in a | Eric Paris | 1 | -0/+68 |
2008-11-11 | This patch will print cap_permitted and cap_inheritable data in the PATH | Eric Paris | 1 | -5/+77 |
2008-10-13 | tty: Fix abusers of current->sighand->tty | Alan Cox | 1 | -5/+4 |
2008-09-01 | [PATCH] audit: Moved variable declaration to beginning of function | Cordelia | 1 | -1/+2 |
2008-08-04 | Re: [PATCH] Fix the kernel panic of audit_filter_task when key field is set | zhangxiliang | 1 | -0/+7 |
2008-08-01 | [PATCH] Fix the kernel panic of audit_filter_task when key field is set | zhangxiliang | 1 | -1/+1 |
2008-08-01 | [PATCH] Audit: Collect signal info when SIGUSR2 is sent to auditd | Eric Paris | 1 | -1/+1 |
2008-07-23 | x86_64 syscall audit fast-path | Roland McGrath | 1 | -1/+2 |
2008-04-28 | [PATCH] new predicate - AUDIT_FILETYPE | Al Viro | 1 | -0/+16 |
2008-04-28 | [PATCH 2/2] audit: fix sparse shadowed variable warnings | Harvey Harrison | 1 | -2/+0 |
2008-04-28 | [PATCH 1/2] audit: move extern declarations to audit.h | Harvey Harrison | 1 | -6/+0 |
2008-04-28 | Audit: standardize string audit interfaces | Eric Paris | 1 | -4/+4 |
2008-04-28 | Audit: end printk with newline | Eric Paris | 1 | -4/+4 |
2008-04-19 | Audit: Final renamings and cleanup | Ahmed S. Darwish | 1 | -6/+6 |
2008-04-19 | Audit: internally use the new LSM audit hooks | Ahmed S. Darwish | 1 | -5/+4 |
2008-04-19 | Audit: use new LSM hooks instead of SELinux exports | Ahmed S. Darwish | 1 | -26/+29 |
2008-03-01 | [PATCH] Audit: Fix the format type for size_t variables | Paul Moore | 1 | -1/+1 |
2008-02-18 | Audit: use == not = in if statements | Eric Paris | 1 | -1/+4 |
2008-02-14 | d_path: Use struct path in struct avc_audit_data | Jan Blunck | 1 | -17/+11 |
2008-02-14 | Use struct path in fs_struct | Jan Blunck | 1 | -2/+2 |
2008-02-01 | [AUDIT] create context if auditing was ever enabled | Eric Paris | 1 | -1/+2 |
2008-02-01 | [AUDIT] break large execve argument logging into smaller messages | Eric Paris | 1 | -40/+165 |
2008-02-01 | [AUDIT] do not panic on exclude messages in audit_log_pid_context() | Eric Paris | 1 | -1/+1 |
2008-02-01 | [AUDIT] Add End of Event record | Eric Paris | 1 | -0/+5 |
2008-02-01 | [AUDIT] add session id to audit messages | Eric Paris | 1 | -9/+27 |
2008-02-01 | [AUDIT] collect uid, loginuid, and comm in OBJ_PID records | Eric Paris | 1 | -5/+27 |
2008-02-01 | [AUDIT] return EINTR not ERESTART* | Eric Paris | 1 | -1/+18 |
2008-02-01 | [PATCH] get rid of loginuid races | Al Viro | 1 | -41/+15 |
2008-02-01 | [PATCH] switch audit_get_loginuid() to task_struct * | Al Viro | 1 | -2/+3 |
2007-10-22 | auditsc: fix kernel-doc param warnings | Randy Dunlap | 1 | -2/+2 |
2007-10-21 | [PATCH] audit: watching subtrees | Al Viro | 1 | -1/+220 |
2007-10-21 | [PATCH] pass dentry to audit_inode()/audit_inode_child() | Al Viro | 1 | -2/+4 |
2007-10-18 | whitespace fixes: syscall auditing | Daniel Walker | 1 | -5/+5 |
2007-10-17 | Clean up duplicate includes in kernel/ | Jesper Juhl | 1 | -1/+0 |
2007-10-09 | SUNRPC: Convert rpc_pipefs to use the generic filesystem notification hooks | Trond Myklebust | 1 | -0/+1 |
2007-08-22 | kernel/auditsc.c: fix an off-by-one | Adrian Bunk | 1 | -1/+1 |
2007-08-07 | fix oops in __audit_signal_info() | Al Viro | 1 | -11/+11 |
2007-07-28 | audit: fix two bugs in the new execve audit code | Peter Zijlstra | 1 | -2/+4 |
2007-07-22 | [PATCH] get rid of AVC_PATH postponed treatment | Al Viro | 1 | -47/+0 |
2007-07-22 | [PATCH] Make IPC mode consistent | Steve Grubb | 1 | -2/+2 |
2007-07-19 | mm: variable length argument support | Ollie Wild | 1 | -1/+1 |
2007-07-19 | audit: rework execve audit | Peter Zijlstra | 1 | -21/+63 |
2007-07-16 | kerneldoc fix in audit_core_dumps | Henrik Kretzschmar | 1 | -1/+1 |
2007-07-16 | Audit: add TTY input auditing | Miloslav Trmac | 1 | -3/+0 |
2007-05-11 | [PATCH] Abnormal End of Processes | Steve Grubb | 1 | -0/+39 |
2007-05-11 | [PATCH] match audit name data | Amy Griffis | 1 | -58/+84 |
2007-05-11 | [PATCH] complete message queue auditing | Amy Griffis | 1 | -27/+0 |
2007-05-11 | [PATCH] initialize name osid | Amy Griffis | 1 | -0/+1 |
2007-05-11 | [PATCH] audit signal recipients | Amy Griffis | 1 | -19/+92 |
2007-05-11 | [PATCH] auditing ptrace | Al Viro | 1 | -0/+29 |
2007-03-14 | [PATCH] fix deadlock in audit_log_task_context() | Al Viro | 1 | -13/+11 |
2007-02-17 | [PATCH] AUDIT_FD_PAIR | Al Viro | 1 | -0/+40 |
2006-12-08 | [PATCH] struct path: convert kernel | Josef Sipek | 1 | -2/+2 |
2006-12-08 | [PATCH] tty: ->signal->tty locking | Peter Zijlstra | 1 | -0/+2 |
2006-12-06 | audit: Add auditing to ipsec | Joy Latten | 1 | -1/+5 |
2006-12-04 | [PATCH] severing skbuff.h -> highmem.h | Al Viro | 1 | -0/+1 |
2006-10-04 | [PATCH] name_count array overrun | Steve Grubb | 1 | -2/+17 |
2006-10-04 | [PATCH] PPID filtering fix | Alexander Viro | 1 | -2/+7 |
2006-09-29 | [PATCH] audit/accounting: tty locking | Alan Cox | 1 | -0/+5 |
2006-09-26 | [PATCH] selinux: rename selinux_ctxid_to_string | Stephen Smalley | 1 | -2/+2 |
2006-09-26 | [PATCH] selinux: eliminate selinux_task_ctxid | Stephen Smalley | 1 | -1/+1 |
2006-09-11 | [PATCH] audit: AUDIT_PERM support | Al Viro | 1 | -0/+51 |
2006-08-03 | [PATCH] take filling ->pid, etc. out of audit_get_context() | Al Viro | 1 | -11/+12 |
2006-08-03 | [PATCH] don't bother with aux entires for dummy context | Al Viro | 1 | -3/+3 |
2006-08-03 | [PATCH] mark context of syscall entered with no rules as dummy | Al Viro | 1 | -2/+4 |
2006-08-03 | [PATCH] introduce audit rules counter | Al Viro | 1 | -0/+3 |
2006-08-03 | [PATCH] fix missed create event for directory audit | Amy Griffis | 1 | -3/+13 |
2006-08-03 | [PATCH] fix faulty inode data collection for open() with O_CREAT | Amy Griffis | 1 | -22/+41 |
2006-07-01 | [PATCH] audit: support for object context filters | Darrel Goeddel | 1 | -0/+40 |
2006-07-01 | [PATCH] audit: rename AUDIT_SE_* constants | Darrel Goeddel | 1 | -5/+5 |
2006-07-01 | [PATCH] add rule filterkey | Amy Griffis | 1 | -0/+15 |
2006-06-27 | [PATCH] Remove redundant NULL checks before [kv]free - in kernel/ | Jesper Juhl | 1 | -2/+1 |
2006-06-27 | [PATCH] fix kernel-doc in kernel/ dir | Randy Dunlap | 1 | -4/+3 |
2006-06-23 | [PATCH] Doc: add audit & acct to DocBook | Randy Dunlap | 1 | -0/+1 |
2006-06-20 | [PATCH] make set_loginuid obey audit_enabled | Steve Grubb | 1 | -11/+16 |
2006-06-20 | [PATCH] log more info for directory entry change events | Amy Griffis | 1 | -54/+69 |
2006-06-20 | [PATCH] audit: path-based rules | Amy Griffis | 1 | -36/+88 |
2006-06-20 | [PATCH] Audit of POSIX Message Queue Syscalls v.2 | George C. Wilson | 1 | -1/+273 |
2006-06-20 | [PATCH] deprecate AUDIT_POSSBILE | Al Viro | 1 | -1/+0 |
2006-06-20 | [PATCH] inline more audit helpers | Al Viro | 1 | -10/+4 |
2006-06-20 | [PATCH] update of IPC audit record cleanup | Linda Knippers | 1 | -17/+5 |
2006-06-20 | [PATCH] add filtering by ppid | Al Viro | 1 | -0/+4 |
2006-06-20 | [PATCH] log ppid | Al Viro | 1 | -2/+5 |
2006-06-20 | [PATCH] collect sid of those who send signals to auditd | Al Viro | 1 | -11/+12 |
2006-06-20 | [PATCH] execve argument logging | Al Viro | 1 | -0/+51 |
2006-05-01 | [PATCH] Audit Filter Performance | Steve Grubb | 1 | -4/+7 |
2006-05-01 | [PATCH] Rework of IPC auditing | Steve Grubb | 1 | -3/+51 |
2006-05-01 | [PATCH] More user space subject labels | Steve Grubb | 1 | -2/+2 |
2006-05-01 | [PATCH] change lspp ipc auditing | Steve Grubb | 1 | -47/+21 |
2006-05-01 | [PATCH] audit inode patch | Steve Grubb | 1 | -37/+16 |
2006-05-01 | [PATCH] support for context based audit filtering, part 2 | Darrel Goeddel | 1 | -0/+20 |
2006-05-01 | [PATCH] no need to wank with task_lock() and pinning task down in audit_sysca... | Al Viro | 1 | -9/+1 |
2006-05-01 | [PATCH] drop task argument of audit_syscall_{entry,exit} | Al Viro | 1 | -4/+4 |
2006-05-01 | [PATCH] drop gfp_mask in audit_log_exit() | Al Viro | 1 | -30/+32 |
2006-05-01 | [PATCH] move call of audit_free() into do_exit() | Al Viro | 1 | -8/+1 |
2006-05-01 | [PATCH] deal with deadlocks in audit_free() | Al Viro | 1 | -10/+10 |
2006-03-25 | Merge branch 'audit.b3' of git://git.kernel.org/pub/scm/linux/kernel/git/viro... | Linus Torvalds | 1 | -400/+434 |
2006-03-20 | [PATCH] simplify audit_free() locking | Ingo Molnar | 1 | -3/+7 |
2006-03-20 | [PATCH] Add tty to syscall audit records | Steve Grubb | 1 | -2/+8 |
2006-03-20 | [PATCH] audit string fields interface + consumer | Amy Griffis | 1 | -26/+24 |
2006-03-20 | [PATCH] Fix audit record filtering with !CONFIG_AUDITSYSCALL | David Woodhouse | 1 | -376/+4 |
2006-03-20 | [PATCH] Miscellaneous bug and warning fixes | Dustin Kirkland | 1 | -9/+12 |
2006-03-20 | [PATCH] Capture selinux subject/object context information. | Dustin Kirkland | 1 | -8/+134 |
2006-03-20 | [PATCH] Exclude messages by message type | Dustin Kirkland | 1 | -1/+34 |
2006-03-20 | [PATCH] Collect more inode information during syscall processing. | Amy Griffis | 1 | -24/+118 |
2006-03-20 | [PATCH] Pass dentry, not just name, in fsnotify creation hooks. | Amy Griffis | 1 | -1/+1 |
2006-03-20 | [PATCH] Filter rule comparators | Dustin Kirkland | 1 | -42/+75 |
2006-03-20 | [PATCH] AUDIT: kerneldoc for kernel/audit*.c | Randy Dunlap | 1 | -18/+132 |
2006-03-20 | [PATCH] make vm86 call audit_syscall_exit | Jason Baron | 1 | -5/+0 |
2006-02-24 | Merge ../powerpc-merge | Paul Mackerras | 1 | -3/+3 |
2006-02-18 | [PATCH] GFP_KERNEL allocations in atomic (auditsc) | Al Viro | 1 | -3/+3 |
2006-02-10 | [PATCH] powerpc: trivial: modify comments to refer to new location of files | Jon Mason | 1 | -1/+1 |
2006-01-18 | [PATCH] EDAC: atomic scrub operations | Alan Cox | 1 | -1/+1 |
2005-10-28 | [PATCH] gfp_t: kernel/* | Al Viro | 1 | -1/+1 |
2005-08-27 | [AUDIT] Allow filtering on system call success _or_ failure | David Woodhouse | 1 | -2/+6 |
2005-08-17 | AUDIT: Prevent duplicate syscall rules | Amy Griffis | 1 | -39/+56 |
2005-08-17 | AUDIT: Speed up audit_filter_syscall() for the non-auditable case. | David Woodhouse | 1 | -10/+12 |
2005-08-17 | AUDIT: Fix task refcount leak in audit_filter_syscall() | David Woodhouse | 1 | -1/+2 |
2005-07-18 | AUDIT: Reduce contention in audit_serial() | David Woodhouse | 1 | -1/+3 |
2005-07-14 | AUDIT: Fix compile error in audit_filter_syscall | David Woodhouse | 1 | -1/+1 |
2005-07-13 | AUDIT: Avoid scheduling in idle thread | David Woodhouse | 1 | -5/+8 |
2005-07-13 | AUDIT: Exempt the whole auditd thread-group from auditing | David Woodhouse | 1 | -2/+2 |
2005-07-02 | AUDIT: Really don't audit auditd. | David Woodhouse | 1 | -2/+2 |
2005-06-24 | AUDIT: Clean up user message filtering | David Woodhouse | 1 | -14/+42 |
2005-06-24 | AUDIT: Return correct result from audit_filter_rules() | David Woodhouse | 1 | -1/+1 |
2005-06-23 | AUDIT: No really, we don't want to audit auditd. | David Woodhouse | 1 | -1/+1 |
2005-06-22 | AUDIT: Wait for backlog to clear when generating messages. | David Woodhouse | 1 | -7/+7 |
2005-06-22 | AUDIT: Optimise the audit-disabled case for discarding user messages | David Woodhouse | 1 | -5/+16 |