aboutsummaryrefslogtreecommitdiffstats
path: root/kernel/audit.c
AgeCommit message (Expand)AuthorFilesLines
2024-01-25audit: use KMEM_CACHE() instead of kmem_cache_create()Kunwu Chan1-3/+1
2023-11-12audit: Send netlink ACK before setting connection in auditd_setChris Riches1-7/+24
2023-08-15audit: move trailing statements to next lineAtul Kumar Pant1-1/+2
2023-07-20audit: include security.h unconditionallyXiu Jianfeng1-2/+0
2022-08-29audit: use time_after to compare timewuchi1-5/+3
2022-06-13audit: make is_audit_feature_set() staticXiu Jianfeng1-1/+1
2022-06-07audit: remove redundant data_len checkShreenidhi Shedi1-1/+1
2022-01-25audit: improve audit queue handling when "audit=1" on cmdlinePaul Moore1-19/+43
2022-01-11Merge tag 'audit-pr-20220110' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-3/+19
2022-01-11Merge tag 'selinux-pr-20220110' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-2/+2
2021-12-20audit: use struct_size() helper in audit_[send|make]_reply()Xiu Jianfeng1-1/+1
2021-12-15audit: improve robustness of the audit queue handlingPaul Moore1-11/+10
2021-12-15audit: ensure userspace is penalized the same as the kernel when under pressurePaul Moore1-1/+17
2021-12-14audit: use struct_size() helper in kmalloc()Xiu Jianfeng1-1/+1
2021-11-22lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()Paul Moore1-2/+2
2021-03-22lsm: separate security_task_getsecid() into subjective and objective variantsPaul Moore1-2/+2
2021-01-15audit: Remove leftover reference to the audit_taskletDavidlohr Bueso1-1/+1
2021-01-04kernel/audit: convert comma to semicolonZheng Yongjun1-1/+1
2020-12-02audit: replace atomic_add_return()Yejune Deng1-1/+1
2020-11-24audit: fix macros warningsAlex Shi1-1/+1
2020-10-27audit: trigger accompanying records when no rules presentRichard Guy Briggs1-0/+3
2020-10-27audit: fix a kernel-doc markupMauro Carvalho Chehab1-1/+1
2020-08-26audit: Remove redundant null checkXu Wang1-2/+1
2020-08-17audit: uninitialize variable audit_sig_sidJules Irenge1-1/+1
2020-08-17audit: change unnecessary globals into staticsJules Irenge1-3/+3
2020-08-04Merge tag 'audit-pr-20200803' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-12/+27
2020-08-04Merge tag 'uninit-macro-v5.9-rc1' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds1-1/+1
2020-07-29Merge tag 'audit-pr-20200729' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-1/+0
2020-07-29revert: 1320a4052ea1 ("audit: trigger accompanying records when no rules pres...Paul Moore1-1/+0
2020-07-21audit: report audit wait metric in audit status replyMax Englander1-10/+25
2020-07-21audit: purge audit_log_string from the intra-kernel audit APIRichard Guy Briggs1-2/+2
2020-07-16treewide: Remove uninitialized_var() usageKees Cook1-1/+1
2020-06-02Merge tag 'audit-pr-20200601' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-26/+74
2020-04-27audit: log audit netlink multicast bind and unbindRichard Guy Briggs1-4/+44
2020-04-22audit: fix a net reference leak in audit_list_rules_send()Paul Moore1-1/+1
2020-04-20audit: fix a net reference leak in audit_send_reply()Paul Moore1-21/+29
2020-04-20audit: check the length of userspace generated audit recordsPaul Moore1-0/+3
2020-03-31Merge tag 'audit-pr-20200330' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-0/+1
2020-03-12audit: trigger accompanying records when no rules presentRichard Guy Briggs1-0/+1
2020-02-24audit: always check the netlink payload length in audit_receive_msg()Paul Moore1-19/+21
2019-12-09audit: Add __rcu annotation to RCU pointerAmol Grover1-2/+3
2019-10-25audit: remove redundant condition check in kauditd_thread()Yunfeng Ye1-2/+2
2019-10-03audit: Report suspicious O_CREAT usageKees Cook1-5/+6
2019-07-08Merge tag 'audit-pr-20190702' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-0/+27
2019-05-30treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156Thomas Gleixner1-14/+1
2019-05-21audit: deliver signal_info regarless of syscallRichard Guy Briggs1-0/+27
2019-03-20audit: connect LOGIN record to its syscall recordRichard Guy Briggs1-1/+1
2019-02-03audit: remove audit_context when CONFIG_ AUDIT and not AUDITSYSCALLRichard Guy Briggs1-157/+0
2019-01-30audit: ignore fcaps on umountRichard Guy Briggs1-1/+9
2019-01-25audit: add support for fcaps v3Richard Guy Briggs1-2/+4
2019-01-25audit: move loginuid and sessionid from CONFIG_AUDITSYSCALL to CONFIG_AUDITRichard Guy Briggs1-0/+85
2019-01-18audit: add syscall information to CONFIG_CHANGE recordsRichard Guy Briggs1-9/+19
2019-01-14audit: give a clue what CONFIG_CHANGE op was involvedRichard Guy Briggs1-2/+5
2018-12-14audit: remove duplicated include from audit.cYueHaibing1-1/+0
2018-12-03audit: shorten PATH cap values when zeroRichard Guy Briggs1-4/+6
2018-11-26audit: use current whenever possiblePaul Moore1-17/+17
2018-11-26audit: minimize our use of audit_log_format()Paul Moore1-6/+5
2018-11-19audit: use session_info helperRichard Guy Briggs1-3/+3
2018-07-17audit: use ktime_get_coarse_real_ts64() for timestampsPaul Moore1-1/+1
2018-07-03audit: use ktime_get_coarse_ts64() for time accessArnd Bergmann1-1/+1
2018-06-19audit: eliminate audit_enabled magic number comparisonRichard Guy Briggs1-3/+0
2018-06-19audit: rename FILTER_TYPE to FILTER_EXCLUDERichard Guy Briggs1-1/+1
2018-05-14audit: use inline function to get audit contextRichard Guy Briggs1-4/+2
2018-04-20audit: add syscall information to FEATURE_CHANGE recordsRichard Guy Briggs1-2/+2
2018-04-06Merge tag 'audit-pr-20180403' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-32/+76
2018-03-26treewide: Align function definition open/close bracesJoe Perches1-3/+3
2018-03-21audit: remove path param from link denied functionRichard Guy Briggs1-2/+1
2018-03-08audit: link denied should not directly generate PATH recordRichard Guy Briggs1-13/+1
2018-03-08audit: make ANOM_LINK obey audit_enabled and audit_dummy_contextRichard Guy Briggs1-0/+3
2018-03-06audit: do not panic on invalid boot parameterGreg Edwards1-7/+14
2018-02-23audit: track the owner of the command mutex ourselvesPaul Moore1-11/+55
2018-02-21audit: return on memory error to avoid null pointer dereferenceRichard Guy Briggs1-0/+2
2018-02-14audit: update bugtracker and source URIsRichard Guy Briggs1-1/+2
2017-11-10Audit: remove unused audit_log_secctx functionCasey Schaufler1-26/+0
2017-11-10audit: Allow auditd to set pid to 0 to end auditingSteve Grubb1-13/+16
2017-11-10audit: use audit_set_enabled() in audit_enable()Paul Moore1-2/+2
2017-11-10audit: convert audit_ever_enabled to a booleanPaul Moore1-1/+1
2017-11-10audit: don't use simple_strtol() anymorePaul Moore1-2/+7
2017-11-10audit: initialize the audit subsystem as early as possiblePaul Moore1-1/+1
2017-11-10audit: ensure that 'audit=1' actually enables audit for PID 1Paul Moore1-5/+5
2017-09-05audit: update the function commentsGeliang Tang1-1/+1
2017-09-05audit: Reduce overhead using a coarse clockMel Gorman1-1/+1
2017-07-20Merge branch 'stable-4.13' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-0/+1
2017-07-19audit: fix memleak in auditd_send_unicast_skb.Shu Wang1-0/+1
2017-07-05Merge branch 'stable-4.13' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-32/+29
2017-06-16audit: make sure we never skip the multicast broadcastPaul Moore1-3/+2
2017-06-13audit: fix a race condition with the auditd tracking codePaul Moore1-13/+23
2017-05-23audit: unswing cap_* fields in PATH recordsRichard Guy Briggs1-16/+4
2017-05-03Merge branch 'stable-4.12' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-146/+173
2017-05-02audit: fix the RCU locking for the auditd_connection structurePaul Moore1-57/+100
2017-05-02audit: use kmem_cache to manage the audit_buffer cachePaul Moore1-49/+17
2017-05-02audit: Use timespec64 to represent audit timestampsDeepa Dinamani1-5/+5
2017-05-02audit: store the auditd PID as a pid struct instead of pid_tPaul Moore1-27/+57
2017-05-02audit: kernel generated netlink traffic should have a portid of 0Paul Moore1-17/+6
2017-05-02audit: combine audit_receive() and audit_receive_skb()Paul Moore1-11/+8
2017-04-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-35/+32
2017-04-13netlink: extended ACK reportingJohannes Berg1-1/+1
2017-04-10audit: make sure we don't let the retry queue grow without boundsPaul Moore1-35/+32
2017-03-21audit: fix auditd/kernel connection state trackingPaul Moore1-245/+394
2017-02-21Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-2/+10
2017-01-18audit: add feature audit_lost resetRichard Guy Briggs1-1/+7
2016-12-17Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-2/+2
2016-12-14Merge branch 'stable-4.10' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-209/+323
2016-12-14audit: Make AUDIT_KERNEL event conform to the specificationSteve Grubb1-1/+3
2016-12-14audit: use proper refcount locking on audit_sockRichard Guy Briggs1-6/+24
2016-12-14audit: don't ever sleep on a command record/messagePaul Moore1-5/+13
2016-12-14audit: handle a clean auditd shutdown with gracePaul Moore1-0/+6
2016-12-14audit: wake up kauditd_thread after auditd registersPaul Moore1-0/+1
2016-12-14audit: rework audit_log_start()Paul Moore1-56/+36
2016-12-14audit: rework the audit queue handlingPaul Moore1-121/+226
2016-12-14audit: rename the queues and kauditd related functionsPaul Moore1-20/+20
2016-12-14audit: queue netlink multicast sends just like we do for unicast sendsPaul Moore1-35/+35
2016-12-14audit: fixup audit_init()Paul Moore1-6/+8
2016-12-14audit: move kaudit thread start from auditd registration to kaudit init (#2)Richard Guy Briggs1-10/+4
2016-12-05audit_log_{name,link_denied}: constify struct pathAl Viro1-2/+2
2016-12-01audit: remove useless synchronize_net()WANG Cong1-2/+1
2016-11-18netns: make struct pernet_operations::id unsigned intAlexey Dobriyan1-1/+1
2016-10-04Merge branch 'stable-4.9' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-1/+7
2016-08-30audit: consistently record PIDs with task_tgid_nr()Paul Moore1-1/+7
2016-07-29Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-2/+2
2016-06-29Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-0/+17
2016-06-28audit: move audit_get_tty to reduce scope and kabi changesRichard Guy Briggs1-0/+17
2016-06-27audit: add fields to exclude filter by reusing user filterRichard Guy Briggs1-2/+2
2016-05-18Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-20/+10
2016-04-26audit: add tty field to LOGIN eventRichard Guy Briggs1-13/+5
2016-04-04audit: we don't need to __set_current_state(TASK_RUNNING)Paul Moore1-7/+5
2016-03-19Merge branch 'stable-4.6' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-1/+19
2016-01-27tty: audit: Handle tty audit enable atomicallyPeter Hurley1-13/+12
2016-01-27tty: audit: Combine push functionsPeter Hurley1-1/+1
2016-01-25audit: log failed attempts to change audit_pid configurationRichard Guy Briggs1-2/+6
2016-01-25audit: stop an old auditd being starved out by a new auditdRichard Guy Briggs1-1/+15
2016-01-17Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds1-1/+1
2016-01-13audit: Delete unnecessary checks before two function callsMarkus Elfring1-5/+2
2016-01-13audit: wake up threads if queue switched from limited to unlimitedRichard Guy Briggs1-1/+2
2016-01-13audit: include auditd's threads in audit_log_start() wait exceptionRichard Guy Briggs1-1/+1
2016-01-13audit: remove audit_backlog_wait_overflowPaul Moore1-2/+1
2016-01-13audit: don't needlessly reset valid wait timeRichard Guy Briggs1-1/+1
2015-12-24security: Make inode argument of inode_getsecid non-constAndreas Gruenbacher1-1/+1
2015-11-06mm, page_alloc: distinguish between being unable to sleep, unwilling to sleep...Mel Gorman1-3/+3
2015-11-04audit: make audit_log_common_recv_msg() a void functionPaul Moore1-5/+3
2015-11-04audit: removing unused variableSaurabh Sengar1-4/+3
2015-11-04audit: audit_string_contains_control can be booleanYaowei Bai1-3/+3
2015-11-04audit: try harder to send to auditd upon netlink failureRichard Guy Briggs1-5/+22
2015-09-08Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-1/+1
2015-08-06audit: use macros for unset inode and device valuesRichard Guy Briggs1-1/+1
2015-06-27Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-1/+1
2015-05-29audit: fix for typo in comment to function audit_log_link_denied()Shailendra Verma1-1/+1
2015-04-26Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-1/+1
2015-04-22Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-17/+30
2015-04-15VFS: audit: d_backing_inode() annotationsDavid Howells1-1/+1
2015-03-13audit: Remove condition which always evaluates to falsePranith Kumar1-3/+2
2015-02-23audit: reduce mmap_sem hold for mm->exe_fileDavidlohr Bueso1-8/+14
2015-02-23audit: consolidate handling of mm->exe_fileDavidlohr Bueso1-8/+15
2015-02-23audit: code clean upAmeen Ali1-3/+2
2015-02-23audit: don't reset working wait time accidentally with auditdRichard Guy Briggs1-1/+2
2015-02-23audit: don't lose set wait time on first successful call to audit_log_start()Richard Guy Briggs1-3/+4
2014-12-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds1-1/+1
2014-12-27netlink/genetlink: pass network namespace to bind/unbindJohannes Berg1-1/+1
2014-12-23Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-4/+4
2014-12-19audit: use supplied gfp_mask from audit_buffer in kauditd_send_multicast_skbRichard Guy Briggs1-4/+4
2014-12-13Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-1/+1
2014-12-09Merge branch 'sched-core-for-linus' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds1-10/+1
2014-12-09Merge branch 'next' into upstream for v3.19Paul Moore1-1/+1
2014-11-17audit: convert status version to a feature bitmapRichard Guy Briggs1-1/+1
2014-11-13Merge branch 'stable-3.18' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-1/+1
2014-11-04audit, sched/wait: Fixup kauditd_thread() wait loopPeter Zijlstra1-10/+1
2014-10-30audit: AUDIT_FEATURE_CHANGE message format missing delimiting spaceRichard Guy Briggs1-1/+1
2014-10-19Merge git://git.infradead.org/users/eparis/auditLinus Torvalds1-20/+10
2014-09-23audit: get comm using lock to avoid race in string printingRichard Guy Briggs1-3/+2
2014-09-23audit: correct AUDIT_GET_FEATURE return message typeRichard Guy Briggs1-1/+1
2014-09-23audit: set nlmsg_len for multicast messages.Richard Guy Briggs1-1/+2
2014-09-23audit: use atomic_t to simplify audit_serial()Richard Guy Briggs1-12/+2
2014-09-23kernel/audit.c: use ARRAY_SIZE instead of sizeof/sizeof[0]Fabian Frederick1-1/+1
2014-09-23audit: reduce scope of audit_log_fcapsRichard Guy Briggs1-1/+1
2014-09-23audit: reduce scope of audit_net_idRichard Guy Briggs1-1/+1
2014-07-24CAPABILITIES: remove undefined caps from all processesEric Paris1-1/+1
2014-06-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-4/+60
2014-06-06ipc, kernel: use Linux headersPaul McQuade1-1/+1
2014-05-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-2/+2
2014-04-24net: Use netlink_ns_capable to verify the permisions of netlink messagesEric W. Biederman1-2/+2
2014-04-22audit: send multicast messages only if there are listenersRichard Guy Briggs1-0/+3
2014-04-22audit: add netlink multicast group for log readRichard Guy Briggs1-4/+47
2014-04-22audit: add netlink audit protocol bind to check capabilities on multicast joinRichard Guy Briggs1-0/+10
2014-04-12Merge git://git.infradead.org/users/eparis/auditLinus Torvalds1-11/+16
2014-03-31AUDIT: Allow login in non-init namespacesEric Paris1-1/+11
2014-03-30AUDIT: Allow login in non-init namespacesEric Paris1-1/+11
2014-03-24kernel: Use RCU_INIT_POINTER(x, NULL) in audit.cMonam Agarwal1-1/+1
2014-03-20audit: remove stray newlines from audit_log_lost messagesJosh Boyer1-2/+2
2014-03-20audit: allow user processes to log from another PID namespaceRichard Guy Briggs1-3/+7
2014-03-20audit: anchor all pid references in the initial pid namespaceRichard Guy Briggs1-2/+3
2014-03-20audit: convert PPIDs to the inital PID namespace.Richard Guy Briggs1-2/+2
2014-03-20audit: Send replies in the proper network namespace.Eric W. Biederman1-11/+10
2014-03-20audit: Use struct net not pid_t to remember the network namespce to reply inEric W. Biederman1-4/+6
2014-03-08audit: Update kdoc for audit_send_reply and audit_list_rules_sendEric W. Biederman1-1/+1
2014-02-28audit: Send replies in the proper network namespace.Eric W. Biederman1-11/+10
2014-02-28audit: Use struct net not pid_t to remember the network namespce to reply inEric W. Biederman1-4/+6
2014-01-17audit: fix location of __net_initdata for audit_net_opsRichard Guy Briggs1-1/+1
2014-01-17audit: remove pr_info for every network namespaceEric Paris1-2/+0
2014-01-14audit: Convert int limit uses to u32Joe Perches1-24/+25
2014-01-14audit: Use more current logging styleJoe Perches1-20/+18