aboutsummaryrefslogtreecommitdiffstats
path: root/kernel/auditfilter.c
AgeCommit message (Expand)AuthorFilesLines
2024-01-25audit: remove unnecessary assignment in audit_dupe_lsm_field()Li zeming1-1/+1
2023-08-15audit: move trailing statements to next lineAtul Kumar Pant1-1/+2
2023-08-15audit: add space before parenthesis and around '=', "==", and '<'Atul Kumar Pant1-8/+8
2022-01-11Merge tag 'audit-pr-20220110' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-2/+2
2021-12-20audit: use struct_size() helper in audit_[send|make]_reply()Xiu Jianfeng1-1/+1
2021-12-14audit: use struct_size() helper in kmalloc()Xiu Jianfeng1-1/+1
2021-11-22lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()Paul Moore1-2/+1
2021-09-19audit: add filtering for io_uring recordsPaul Moore1-3/+12
2021-03-22lsm: separate security_task_getsecid() into subjective and objective variantsPaul Moore1-1/+2
2020-08-23treewide: Use fallthrough pseudo-keywordGustavo A. R. Silva1-1/+1
2020-04-22audit: fix a net reference leak in audit_list_rules_send()Paul Moore1-9/+7
2020-02-22audit: fix error handling in audit_data_to_entry()Paul Moore1-32/+39
2019-07-08Merge tag 'audit-pr-20190702' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-24/+38
2019-05-30treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156Thomas Gleixner1-14/+1
2019-05-30audit: remove the BUG() calls in the audit rule comparison functionsPaul Moore1-3/+0
2019-05-23audit: add saddr_fam filter fieldRichard Guy Briggs1-0/+5
2019-05-23audit: re-structure audit field valid checksRichard Guy Briggs1-22/+34
2019-05-07Merge branch 'work.dcache' of git://git.kernel.org/pub/scm/linux/kernel/git/v...Linus Torvalds1-3/+3
2019-04-28audit_compare_dname_path(): switch to const struct qstr *Al Viro1-3/+3
2019-04-22audit: fix a memory leak bugWenwen Wang1-5/+7
2019-04-08audit: purge unnecessary list_empty callsRichard Guy Briggs1-2/+0
2019-02-12audit: mark expected switch fall-throughGustavo A. R. Silva1-1/+1
2019-01-31audit: remove unused actx param from audit_rule_matchRichard Guy Briggs1-1/+1
2019-01-18audit: add syscall information to CONFIG_CHANGE recordsRichard Guy Briggs1-1/+1
2018-06-19audit: rename FILTER_TYPE to FILTER_EXCLUDERichard Guy Briggs1-5/+5
2018-06-19audit: allow other filter list types for AUDIT_EXEOndrej Mosnáček1-2/+5
2018-05-18audit: use existing session info functionRichard Guy Briggs1-3/+1
2018-04-24audit: allow not equal op for audit by executableOndrej Mosnáček1-1/+1
2018-02-15audit: deprecate the AUDIT_FILTER_ENTRY filterRichard Guy Briggs1-2/+2
2018-02-14audit: session ID should not set arch quick field pointerRichard Guy Briggs1-1/+0
2017-11-10audit: filter PATH records keyed on filesystem magicRichard Guy Briggs1-7/+32
2017-05-02audit: kernel generated netlink traffic should have a portid of 0Paul Moore1-8/+6
2017-05-02audit: remove unnecessary semicolon in audit_field_valid()Nicholas Mc Guire1-2/+2
2016-11-29audit: add support for session ID user filterRichard Guy Briggs1-0/+2
2016-11-20audit: fix formatting of AUDIT_CONFIG_CHANGE eventsSteve Grubb1-2/+1
2016-06-27audit: add fields to exclude filter by reusing user filterRichard Guy Briggs1-98/+53
2016-06-16audit: fix some horrible switch statement style crimesPaul Moore1-2/+6
2016-05-31audit: fixup: log on errors from filter user rulesRichard Guy Briggs1-2/+2
2016-02-08audit: Fix typo in commentWei Yuan1-3/+3
2015-11-04audit: fix comment block whitespaceScott Matheina1-7/+7
2015-08-06audit: implement audit by executableRichard Guy Briggs1-1/+52
2015-08-06audit: clean simple fsnotify implementationRichard Guy Briggs1-1/+1
2015-08-05audit: make audit_del_rule() more robustRichard Guy Briggs1-6/+6
2015-08-05audit: fix uninitialized variable in audit_add_rule()Paul Moore1-1/+1
2015-08-04audit: eliminate unnecessary extra layer of watch referencesRichard Guy Briggs1-13/+3
2015-02-11Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-2/+0
2015-01-20audit: remove vestiges of vers_opsRichard Guy Briggs1-2/+0
2014-12-23Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-13/+10
2014-12-23audit: restore AUDIT_LOGINUID unset ABIRichard Guy Briggs1-0/+10
2014-12-19audit: don't attempt to lookup PIDs when changing PID filtering audit rulesPaul Moore1-13/+0
2014-10-19Merge git://git.infradead.org/users/eparis/auditLinus Torvalds1-24/+32
2014-10-10audit: cull redundancy in audit_rule_changeRichard Guy Briggs1-11/+7
2014-10-10audit: WARN if audit_rule_change called illegallyEric Paris1-1/+2
2014-10-10audit: put rule existence check in canonical orderRichard Guy Briggs1-1/+1
2014-09-23audit: use union for audit_field values since they are mutually exclusiveRichard Guy Briggs1-9/+20
2014-09-23audit: invalid op= values for rulesBurn Alting1-2/+2
2014-08-06kernel/auditfilter.c: replace count*size kmalloc by kcallocFabian Frederick1-2/+2
2014-04-12Merge git://git.infradead.org/users/eparis/auditLinus Torvalds1-8/+25
2014-04-02audit: do not cast audit_rule_data pointers pointleslyEric Paris1-2/+2
2014-03-20audit: anchor all pid references in the initial pid namespaceRichard Guy Briggs1-1/+16
2014-03-20audit: Send replies in the proper network namespace.Eric W. Biederman1-2/+5
2014-03-20audit: Use struct net not pid_t to remember the network namespce to reply inEric W. Biederman1-1/+2
2014-03-08audit: Update kdoc for audit_send_reply and audit_list_rules_sendEric W. Biederman1-1/+1
2014-03-07audit: Use more current logging style againRichard Guy Briggs1-5/+7
2014-02-28audit: Send replies in the proper network namespace.Eric W. Biederman1-2/+5
2014-02-28audit: Use struct net not pid_t to remember the network namespce to reply inEric W. Biederman1-1/+2
2014-01-13audit: log on errors from filter user rulesRichard Guy Briggs1-4/+7
2014-01-13audit: convert all sessionid declaration to unsigned intEric Paris1-1/+1
2014-01-13audit: refactor audit_receive_msg() to clarify AUDIT_*_RULE* casesRichard Guy Briggs1-30/+41
2014-01-13audit: listen in all network namespacesRichard Guy Briggs1-0/+1
2014-01-13audit: fix netlink portid naming and typesRichard Guy Briggs1-8/+10
2013-11-05audit: do not reject all AUDIT_INODE filter typesEric Paris1-0/+1
2013-11-05audit: change decimal constant to macro for invalid uidRichard Guy Briggs1-1/+1
2013-07-09audit: Fix decimal constant descriptionMichal Simek1-1/+1
2013-07-09kernel/auditfilter.c: fix leak in audit_add_rule() error pathChen Gang1-0/+6
2013-07-09kernel/auditfilter.c: fixing build warningRaphael S. Carvalho1-1/+1
2013-05-24auditfilter.c: fix kernel-doc warningsRandy Dunlap1-3/+0
2013-05-11Merge git://git.infradead.org/users/eparis/auditLinus Torvalds1-250/+110
2013-05-07audit: Make testing for a valid loginuid explicit.Eric W. Biederman1-2/+15
2013-04-30audit: use a consistent audit helper to log lsm informationEric Paris1-12/+1
2013-04-30audit: stop pushing loginid, uid, sessionid as argumentsEric Paris1-13/+9
2013-04-30audit: remove the old depricated kernel interfaceEric Paris1-157/+3
2013-04-30audit: make validity checking genericEric Paris1-76/+70
2013-04-29kernel/auditfilter.c: tree and watch will memory leak when failure occursChen Gang1-0/+4
2013-04-16audit: allow checking the type of audit message in the user filterEric Paris1-3/+25
2013-01-10audit: fix auditfilter.c kernel-doc warningsRandy Dunlap1-1/+0
2012-10-12audit: optimize audit_compare_dname_pathJeff Layton1-5/+11
2012-10-12audit: make audit_compare_dname_path use parent_len helperEric Paris1-20/+7
2012-10-12audit: remove dirlen argument to audit_compare_dname_pathJeff Layton1-5/+1
2012-10-12audit: set the name_len in audit_inode for parent lookupsJeff Layton1-0/+30
2012-09-17userns: Convert the audit loginuid to be a kuidEric W. Biederman1-3/+4
2012-09-17audit: Add typespecific uid and gid comparatorsEric W. Biederman1-10/+109
2012-09-17audit: Remove the unused uid parameter from audit_receive_filterEric W. Biederman1-1/+1
2012-09-17audit: Use current instead of NETLINK_CREDS() in audit_filterEric W. Biederman1-7/+6
2012-01-17audit: allow interfield comparison in audit rulesEric Paris1-1/+4
2012-01-17audit: allow audit matching on inode gidEric Paris1-0/+1
2012-01-17audit: allow matching on obj_uidEric Paris1-0/+1
2012-01-17audit: reject entry,always rulesEric Paris1-2/+4
2012-01-17audit: make filetype matching consistent with other filtersEric Paris1-2/+2
2011-03-03netlink: kill loginuid/sessionid/sid members from struct netlink_skb_parmsPatrick McHardy1-3/+7
2010-10-30Audit: add support to match lsm labels on user audit messagesMiloslav Trmac1-0/+12
2010-07-28audit: do not get and put just to free a watchEric Paris1-5/+1
2010-07-28Audit: clean up the audit_watch splitEric Paris1-26/+15
2010-03-30include cleanup: Update gfp.h and slab.h includes to prepare for breaking imp...Tejun Heo1-0/+1
2009-06-24Audit: clean up all op= output to include string quotingEric Paris1-7/+5
2009-06-23Audit: move audit_get_nd completely into audit_watchEric Paris1-13/+2
2009-06-23audit: seperate audit inode watches into a subfileEric Paris1-467/+14
2009-06-23Audit: dereferencing krule as if it were an audit_watchEric Paris1-34/+24
2009-06-23Audit: fix audit watch use after freeEric Paris1-0/+2
2009-05-06inotify: use GFP_NOFS in kernel_event() to work around a lockdep false-positiveWu Fengguang1-2/+2
2009-04-05make the e->rule.xxx shorter in kernel auditfilter.cZhenwen Xu1-8/+8
2009-01-04audit: validate comparison operations, store them in sane formAl Viro1-67/+65
2009-01-04clean up audit_rule_{add,del} a bitAl Viro1-25/+17
2009-01-04audit rules ordering, part 2Al Viro1-56/+39
2009-01-04fixing audit rule ordering mess, part 1Al Viro1-3/+14
2009-01-04audit_update_lsm_rules() misses the audit_inode_hash[] onesAl Viro1-30/+47
2008-11-15Fix inotify watch removal/umount racesAl Viro1-5/+9
2008-08-01Re: [PATCH] the loginuid field should be output in all AUDIT_CONFIG_CHANGE au...zhangxiliang1-2/+8
2008-06-24[PATCH] remove useless argument type in audit_filter_user()Peng Haitao1-1/+1
2008-06-24[PATCH] audit: fix kernel-doc parameter notationRandy Dunlap1-0/+1
2008-04-29Merge branch 'audit.b50' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-20/+25
2008-04-29Remove duplicated unlikely() in IS_ERR()Hirofumi Nakagawa1-5/+5
2008-04-28[PATCH] new predicate - AUDIT_FILETYPEAl Viro1-0/+8
2008-04-28[PATCH 2/2] audit: fix sparse shadowed variable warningsHarvey Harrison1-8/+8
2008-04-28[PATCH 1/2] audit: move extern declarations to audit.hHarvey Harrison1-5/+0
2008-04-28Audit: collect sessionid in netlink messagesEric Paris1-7/+9
2008-04-19Audit: Final renamings and cleanupAhmed S. Darwish1-20/+20
2008-04-19Audit: internally use the new LSM audit hooksAhmed S. Darwish1-44/+17
2008-04-19Audit: use new LSM hooks instead of SELinux exportsAhmed S. Darwish1-3/+5
2008-02-14Introduce path_put()Jan Blunck1-2/+2
2008-02-14Embed a struct path into struct nameidata instead of nd->{dentry,mnt}Jan Blunck1-5/+6
2008-02-01[AUDIT] make audit=0 really stop audit messagesEric Paris1-21/+33
2007-10-21[PATCH] audit: watching subtreesAl Viro1-7/+57
2007-10-18whitespace fixes: audit filteringDaniel Walker1-2/+2
2007-07-22[PATCH] allow audit filtering on bit & operationsEric Paris1-0/+11
2007-07-22[PATCH] audit: fix broken class-based syscall auditKlaus Weidner1-1/+1
2007-07-17kernel/auditfilter: kill bogus uninit'd-var compiler warningJeff Garzik1-8/+4
2007-06-24audit: fix oops removing watch if audit disabledTony Jones1-1/+1
2007-05-15audit_match_signal() and friends are used only if CONFIG_AUDITSYSCALL is setAl Viro1-0/+2
2007-05-11[PATCH] audit signal recipientsAmy Griffis1-1/+47
2007-02-17[PATCH] minor update to rule add/delete messages (ver 2)Steve Grubb1-4/+5
2007-02-11[PATCH] audit: fix audit_filter_user_rules() initialization bugIngo Molnar1-1/+1
2006-12-22[PATCH] audit: fix kstrdup() error checkAkinobu Mita1-2/+2
2006-12-07[PATCH] kernel core: replace kmalloc+memset with kzallocBurman Yan1-2/+1
2006-10-04[PATCH] arch filter lists with < or > should not be acceptedEric Paris1-1/+8
2006-09-26[PATCH] selinux: rename selinux_ctxid_to_stringStephen Smalley1-1/+1
2006-09-11[PATCH] audit: AUDIT_PERM supportAl Viro1-0/+17
2006-09-11[PATCH] update audit rule change messagesAmy Griffis1-5/+14
2006-09-11[PATCH] fix ppid bug in 2.6.18 kernelSteve Grubb1-0/+1
2006-08-03[PATCH] introduce audit rules counterAl Viro1-0/+24
2006-08-03[PATCH] fix audit oops with invalid operatorAmy Griffis1-0/+2
2006-07-01[PATCH] audit syscall classesAl Viro1-0/+39
2006-07-01[PATCH] audit: support for object context filtersDarrel Goeddel1-0/+25
2006-07-01[PATCH] audit: rename AUDIT_SE_* constantsDarrel Goeddel1-25/+25
2006-07-01[PATCH] add rule filterkeyAmy Griffis1-36/+59
2006-06-20[PATCH] log more info for directory entry change eventsAmy Griffis1-2/+6
2006-06-20[PATCH] fix AUDIT_FILTER_PREPEND handlingAmy Griffis1-0/+1
2006-06-20[PATCH] validate rule fields' typesAl Viro1-9/+48
2006-06-20[PATCH] audit: path-based rulesAmy Griffis1-40/+745
2006-06-20[PATCH] deprecate AUDIT_POSSBILEAl Viro1-3/+5
2006-06-20[PATCH] fix audit_krule_to_{rule,data} return valuesAmy Griffis1-2/+2
2006-06-20[PATCH] fix deadlocks in AUDIT_LIST/AUDIT_LIST_RULESAl Viro1-35/+25
2006-05-01[PATCH] More user space subject labelsSteve Grubb1-7/+37
2006-05-01[PATCH] support for context based audit filtering, part 2Darrel Goeddel1-24/+221
2006-03-20[PATCH] sem2mutex: audit_netlink_semIngo Molnar1-8/+8
2006-03-20[PATCH] Fix audit operatorsDustin Kirkland1-6/+12
2006-03-20[PATCH] add/remove rule updateSteve Grubb1-7/+9
2006-03-20[PATCH] audit string fields interface + consumerAmy Griffis1-110/+357
2006-03-20[PATCH] Minor cosmetic cleanups to the code moved into auditfilter.cDavid Woodhouse1-7/+4
2006-03-20[PATCH] Fix audit record filtering with !CONFIG_AUDITSYSCALLDavid Woodhouse1-0/+378
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-09 00:00:19 +0000