Age | Commit message (Expand) | Author | Files | Lines |
2024-01-25 | audit: remove unnecessary assignment in audit_dupe_lsm_field() | Li zeming | 1 | -1/+1 |
2023-08-15 | audit: move trailing statements to next line | Atul Kumar Pant | 1 | -1/+2 |
2023-08-15 | audit: add space before parenthesis and around '=', "==", and '<' | Atul Kumar Pant | 1 | -8/+8 |
2022-01-11 | Merge tag 'audit-pr-20220110' of git://git.kernel.org/pub/scm/linux/kernel/gi... | Linus Torvalds | 1 | -2/+2 |
2021-12-20 | audit: use struct_size() helper in audit_[send|make]_reply() | Xiu Jianfeng | 1 | -1/+1 |
2021-12-14 | audit: use struct_size() helper in kmalloc() | Xiu Jianfeng | 1 | -1/+1 |
2021-11-22 | lsm: security_task_getsecid_subj() -> security_current_getsecid_subj() | Paul Moore | 1 | -2/+1 |
2021-09-19 | audit: add filtering for io_uring records | Paul Moore | 1 | -3/+12 |
2021-03-22 | lsm: separate security_task_getsecid() into subjective and objective variants | Paul Moore | 1 | -1/+2 |
2020-08-23 | treewide: Use fallthrough pseudo-keyword | Gustavo A. R. Silva | 1 | -1/+1 |
2020-04-22 | audit: fix a net reference leak in audit_list_rules_send() | Paul Moore | 1 | -9/+7 |
2020-02-22 | audit: fix error handling in audit_data_to_entry() | Paul Moore | 1 | -32/+39 |
2019-07-08 | Merge tag 'audit-pr-20190702' of git://git.kernel.org/pub/scm/linux/kernel/gi... | Linus Torvalds | 1 | -24/+38 |
2019-05-30 | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156 | Thomas Gleixner | 1 | -14/+1 |
2019-05-30 | audit: remove the BUG() calls in the audit rule comparison functions | Paul Moore | 1 | -3/+0 |
2019-05-23 | audit: add saddr_fam filter field | Richard Guy Briggs | 1 | -0/+5 |
2019-05-23 | audit: re-structure audit field valid checks | Richard Guy Briggs | 1 | -22/+34 |
2019-05-07 | Merge branch 'work.dcache' of git://git.kernel.org/pub/scm/linux/kernel/git/v... | Linus Torvalds | 1 | -3/+3 |
2019-04-28 | audit_compare_dname_path(): switch to const struct qstr * | Al Viro | 1 | -3/+3 |
2019-04-22 | audit: fix a memory leak bug | Wenwen Wang | 1 | -5/+7 |
2019-04-08 | audit: purge unnecessary list_empty calls | Richard Guy Briggs | 1 | -2/+0 |
2019-02-12 | audit: mark expected switch fall-through | Gustavo A. R. Silva | 1 | -1/+1 |
2019-01-31 | audit: remove unused actx param from audit_rule_match | Richard Guy Briggs | 1 | -1/+1 |
2019-01-18 | audit: add syscall information to CONFIG_CHANGE records | Richard Guy Briggs | 1 | -1/+1 |
2018-06-19 | audit: rename FILTER_TYPE to FILTER_EXCLUDE | Richard Guy Briggs | 1 | -5/+5 |
2018-06-19 | audit: allow other filter list types for AUDIT_EXE | Ondrej Mosnáček | 1 | -2/+5 |
2018-05-18 | audit: use existing session info function | Richard Guy Briggs | 1 | -3/+1 |
2018-04-24 | audit: allow not equal op for audit by executable | Ondrej Mosnáček | 1 | -1/+1 |
2018-02-15 | audit: deprecate the AUDIT_FILTER_ENTRY filter | Richard Guy Briggs | 1 | -2/+2 |
2018-02-14 | audit: session ID should not set arch quick field pointer | Richard Guy Briggs | 1 | -1/+0 |
2017-11-10 | audit: filter PATH records keyed on filesystem magic | Richard Guy Briggs | 1 | -7/+32 |
2017-05-02 | audit: kernel generated netlink traffic should have a portid of 0 | Paul Moore | 1 | -8/+6 |
2017-05-02 | audit: remove unnecessary semicolon in audit_field_valid() | Nicholas Mc Guire | 1 | -2/+2 |
2016-11-29 | audit: add support for session ID user filter | Richard Guy Briggs | 1 | -0/+2 |
2016-11-20 | audit: fix formatting of AUDIT_CONFIG_CHANGE events | Steve Grubb | 1 | -2/+1 |
2016-06-27 | audit: add fields to exclude filter by reusing user filter | Richard Guy Briggs | 1 | -98/+53 |
2016-06-16 | audit: fix some horrible switch statement style crimes | Paul Moore | 1 | -2/+6 |
2016-05-31 | audit: fixup: log on errors from filter user rules | Richard Guy Briggs | 1 | -2/+2 |
2016-02-08 | audit: Fix typo in comment | Wei Yuan | 1 | -3/+3 |
2015-11-04 | audit: fix comment block whitespace | Scott Matheina | 1 | -7/+7 |
2015-08-06 | audit: implement audit by executable | Richard Guy Briggs | 1 | -1/+52 |
2015-08-06 | audit: clean simple fsnotify implementation | Richard Guy Briggs | 1 | -1/+1 |
2015-08-05 | audit: make audit_del_rule() more robust | Richard Guy Briggs | 1 | -6/+6 |
2015-08-05 | audit: fix uninitialized variable in audit_add_rule() | Paul Moore | 1 | -1/+1 |
2015-08-04 | audit: eliminate unnecessary extra layer of watch references | Richard Guy Briggs | 1 | -13/+3 |
2015-02-11 | Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/audit | Linus Torvalds | 1 | -2/+0 |
2015-01-20 | audit: remove vestiges of vers_ops | Richard Guy Briggs | 1 | -2/+0 |
2014-12-23 | Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/audit | Linus Torvalds | 1 | -13/+10 |
2014-12-23 | audit: restore AUDIT_LOGINUID unset ABI | Richard Guy Briggs | 1 | -0/+10 |
2014-12-19 | audit: don't attempt to lookup PIDs when changing PID filtering audit rules | Paul Moore | 1 | -13/+0 |
2014-10-19 | Merge git://git.infradead.org/users/eparis/audit | Linus Torvalds | 1 | -24/+32 |
2014-10-10 | audit: cull redundancy in audit_rule_change | Richard Guy Briggs | 1 | -11/+7 |
2014-10-10 | audit: WARN if audit_rule_change called illegally | Eric Paris | 1 | -1/+2 |
2014-10-10 | audit: put rule existence check in canonical order | Richard Guy Briggs | 1 | -1/+1 |
2014-09-23 | audit: use union for audit_field values since they are mutually exclusive | Richard Guy Briggs | 1 | -9/+20 |
2014-09-23 | audit: invalid op= values for rules | Burn Alting | 1 | -2/+2 |
2014-08-06 | kernel/auditfilter.c: replace count*size kmalloc by kcalloc | Fabian Frederick | 1 | -2/+2 |
2014-04-12 | Merge git://git.infradead.org/users/eparis/audit | Linus Torvalds | 1 | -8/+25 |
2014-04-02 | audit: do not cast audit_rule_data pointers pointlesly | Eric Paris | 1 | -2/+2 |
2014-03-20 | audit: anchor all pid references in the initial pid namespace | Richard Guy Briggs | 1 | -1/+16 |
2014-03-20 | audit: Send replies in the proper network namespace. | Eric W. Biederman | 1 | -2/+5 |
2014-03-20 | audit: Use struct net not pid_t to remember the network namespce to reply in | Eric W. Biederman | 1 | -1/+2 |
2014-03-08 | audit: Update kdoc for audit_send_reply and audit_list_rules_send | Eric W. Biederman | 1 | -1/+1 |
2014-03-07 | audit: Use more current logging style again | Richard Guy Briggs | 1 | -5/+7 |
2014-02-28 | audit: Send replies in the proper network namespace. | Eric W. Biederman | 1 | -2/+5 |
2014-02-28 | audit: Use struct net not pid_t to remember the network namespce to reply in | Eric W. Biederman | 1 | -1/+2 |
2014-01-13 | audit: log on errors from filter user rules | Richard Guy Briggs | 1 | -4/+7 |
2014-01-13 | audit: convert all sessionid declaration to unsigned int | Eric Paris | 1 | -1/+1 |
2014-01-13 | audit: refactor audit_receive_msg() to clarify AUDIT_*_RULE* cases | Richard Guy Briggs | 1 | -30/+41 |
2014-01-13 | audit: listen in all network namespaces | Richard Guy Briggs | 1 | -0/+1 |
2014-01-13 | audit: fix netlink portid naming and types | Richard Guy Briggs | 1 | -8/+10 |
2013-11-05 | audit: do not reject all AUDIT_INODE filter types | Eric Paris | 1 | -0/+1 |
2013-11-05 | audit: change decimal constant to macro for invalid uid | Richard Guy Briggs | 1 | -1/+1 |
2013-07-09 | audit: Fix decimal constant description | Michal Simek | 1 | -1/+1 |
2013-07-09 | kernel/auditfilter.c: fix leak in audit_add_rule() error path | Chen Gang | 1 | -0/+6 |
2013-07-09 | kernel/auditfilter.c: fixing build warning | Raphael S. Carvalho | 1 | -1/+1 |
2013-05-24 | auditfilter.c: fix kernel-doc warnings | Randy Dunlap | 1 | -3/+0 |
2013-05-11 | Merge git://git.infradead.org/users/eparis/audit | Linus Torvalds | 1 | -250/+110 |
2013-05-07 | audit: Make testing for a valid loginuid explicit. | Eric W. Biederman | 1 | -2/+15 |
2013-04-30 | audit: use a consistent audit helper to log lsm information | Eric Paris | 1 | -12/+1 |
2013-04-30 | audit: stop pushing loginid, uid, sessionid as arguments | Eric Paris | 1 | -13/+9 |
2013-04-30 | audit: remove the old depricated kernel interface | Eric Paris | 1 | -157/+3 |
2013-04-30 | audit: make validity checking generic | Eric Paris | 1 | -76/+70 |
2013-04-29 | kernel/auditfilter.c: tree and watch will memory leak when failure occurs | Chen Gang | 1 | -0/+4 |
2013-04-16 | audit: allow checking the type of audit message in the user filter | Eric Paris | 1 | -3/+25 |
2013-01-10 | audit: fix auditfilter.c kernel-doc warnings | Randy Dunlap | 1 | -1/+0 |
2012-10-12 | audit: optimize audit_compare_dname_path | Jeff Layton | 1 | -5/+11 |
2012-10-12 | audit: make audit_compare_dname_path use parent_len helper | Eric Paris | 1 | -20/+7 |
2012-10-12 | audit: remove dirlen argument to audit_compare_dname_path | Jeff Layton | 1 | -5/+1 |
2012-10-12 | audit: set the name_len in audit_inode for parent lookups | Jeff Layton | 1 | -0/+30 |
2012-09-17 | userns: Convert the audit loginuid to be a kuid | Eric W. Biederman | 1 | -3/+4 |
2012-09-17 | audit: Add typespecific uid and gid comparators | Eric W. Biederman | 1 | -10/+109 |
2012-09-17 | audit: Remove the unused uid parameter from audit_receive_filter | Eric W. Biederman | 1 | -1/+1 |
2012-09-17 | audit: Use current instead of NETLINK_CREDS() in audit_filter | Eric W. Biederman | 1 | -7/+6 |
2012-01-17 | audit: allow interfield comparison in audit rules | Eric Paris | 1 | -1/+4 |
2012-01-17 | audit: allow audit matching on inode gid | Eric Paris | 1 | -0/+1 |
2012-01-17 | audit: allow matching on obj_uid | Eric Paris | 1 | -0/+1 |
2012-01-17 | audit: reject entry,always rules | Eric Paris | 1 | -2/+4 |
2012-01-17 | audit: make filetype matching consistent with other filters | Eric Paris | 1 | -2/+2 |
2011-03-03 | netlink: kill loginuid/sessionid/sid members from struct netlink_skb_parms | Patrick McHardy | 1 | -3/+7 |
2010-10-30 | Audit: add support to match lsm labels on user audit messages | Miloslav Trmac | 1 | -0/+12 |
2010-07-28 | audit: do not get and put just to free a watch | Eric Paris | 1 | -5/+1 |
2010-07-28 | Audit: clean up the audit_watch split | Eric Paris | 1 | -26/+15 |
2010-03-30 | include cleanup: Update gfp.h and slab.h includes to prepare for breaking imp... | Tejun Heo | 1 | -0/+1 |
2009-06-24 | Audit: clean up all op= output to include string quoting | Eric Paris | 1 | -7/+5 |
2009-06-23 | Audit: move audit_get_nd completely into audit_watch | Eric Paris | 1 | -13/+2 |
2009-06-23 | audit: seperate audit inode watches into a subfile | Eric Paris | 1 | -467/+14 |
2009-06-23 | Audit: dereferencing krule as if it were an audit_watch | Eric Paris | 1 | -34/+24 |
2009-06-23 | Audit: fix audit watch use after free | Eric Paris | 1 | -0/+2 |
2009-05-06 | inotify: use GFP_NOFS in kernel_event() to work around a lockdep false-positive | Wu Fengguang | 1 | -2/+2 |
2009-04-05 | make the e->rule.xxx shorter in kernel auditfilter.c | Zhenwen Xu | 1 | -8/+8 |
2009-01-04 | audit: validate comparison operations, store them in sane form | Al Viro | 1 | -67/+65 |
2009-01-04 | clean up audit_rule_{add,del} a bit | Al Viro | 1 | -25/+17 |
2009-01-04 | audit rules ordering, part 2 | Al Viro | 1 | -56/+39 |
2009-01-04 | fixing audit rule ordering mess, part 1 | Al Viro | 1 | -3/+14 |
2009-01-04 | audit_update_lsm_rules() misses the audit_inode_hash[] ones | Al Viro | 1 | -30/+47 |
2008-11-15 | Fix inotify watch removal/umount races | Al Viro | 1 | -5/+9 |
2008-08-01 | Re: [PATCH] the loginuid field should be output in all AUDIT_CONFIG_CHANGE au... | zhangxiliang | 1 | -2/+8 |
2008-06-24 | [PATCH] remove useless argument type in audit_filter_user() | Peng Haitao | 1 | -1/+1 |
2008-06-24 | [PATCH] audit: fix kernel-doc parameter notation | Randy Dunlap | 1 | -0/+1 |
2008-04-29 | Merge branch 'audit.b50' of git://git.kernel.org/pub/scm/linux/kernel/git/vir... | Linus Torvalds | 1 | -20/+25 |
2008-04-29 | Remove duplicated unlikely() in IS_ERR() | Hirofumi Nakagawa | 1 | -5/+5 |
2008-04-28 | [PATCH] new predicate - AUDIT_FILETYPE | Al Viro | 1 | -0/+8 |
2008-04-28 | [PATCH 2/2] audit: fix sparse shadowed variable warnings | Harvey Harrison | 1 | -8/+8 |
2008-04-28 | [PATCH 1/2] audit: move extern declarations to audit.h | Harvey Harrison | 1 | -5/+0 |
2008-04-28 | Audit: collect sessionid in netlink messages | Eric Paris | 1 | -7/+9 |
2008-04-19 | Audit: Final renamings and cleanup | Ahmed S. Darwish | 1 | -20/+20 |
2008-04-19 | Audit: internally use the new LSM audit hooks | Ahmed S. Darwish | 1 | -44/+17 |
2008-04-19 | Audit: use new LSM hooks instead of SELinux exports | Ahmed S. Darwish | 1 | -3/+5 |
2008-02-14 | Introduce path_put() | Jan Blunck | 1 | -2/+2 |
2008-02-14 | Embed a struct path into struct nameidata instead of nd->{dentry,mnt} | Jan Blunck | 1 | -5/+6 |
2008-02-01 | [AUDIT] make audit=0 really stop audit messages | Eric Paris | 1 | -21/+33 |
2007-10-21 | [PATCH] audit: watching subtrees | Al Viro | 1 | -7/+57 |
2007-10-18 | whitespace fixes: audit filtering | Daniel Walker | 1 | -2/+2 |
2007-07-22 | [PATCH] allow audit filtering on bit & operations | Eric Paris | 1 | -0/+11 |
2007-07-22 | [PATCH] audit: fix broken class-based syscall audit | Klaus Weidner | 1 | -1/+1 |
2007-07-17 | kernel/auditfilter: kill bogus uninit'd-var compiler warning | Jeff Garzik | 1 | -8/+4 |
2007-06-24 | audit: fix oops removing watch if audit disabled | Tony Jones | 1 | -1/+1 |
2007-05-15 | audit_match_signal() and friends are used only if CONFIG_AUDITSYSCALL is set | Al Viro | 1 | -0/+2 |
2007-05-11 | [PATCH] audit signal recipients | Amy Griffis | 1 | -1/+47 |
2007-02-17 | [PATCH] minor update to rule add/delete messages (ver 2) | Steve Grubb | 1 | -4/+5 |
2007-02-11 | [PATCH] audit: fix audit_filter_user_rules() initialization bug | Ingo Molnar | 1 | -1/+1 |
2006-12-22 | [PATCH] audit: fix kstrdup() error check | Akinobu Mita | 1 | -2/+2 |
2006-12-07 | [PATCH] kernel core: replace kmalloc+memset with kzalloc | Burman Yan | 1 | -2/+1 |
2006-10-04 | [PATCH] arch filter lists with < or > should not be accepted | Eric Paris | 1 | -1/+8 |
2006-09-26 | [PATCH] selinux: rename selinux_ctxid_to_string | Stephen Smalley | 1 | -1/+1 |
2006-09-11 | [PATCH] audit: AUDIT_PERM support | Al Viro | 1 | -0/+17 |
2006-09-11 | [PATCH] update audit rule change messages | Amy Griffis | 1 | -5/+14 |
2006-09-11 | [PATCH] fix ppid bug in 2.6.18 kernel | Steve Grubb | 1 | -0/+1 |
2006-08-03 | [PATCH] introduce audit rules counter | Al Viro | 1 | -0/+24 |
2006-08-03 | [PATCH] fix audit oops with invalid operator | Amy Griffis | 1 | -0/+2 |
2006-07-01 | [PATCH] audit syscall classes | Al Viro | 1 | -0/+39 |
2006-07-01 | [PATCH] audit: support for object context filters | Darrel Goeddel | 1 | -0/+25 |
2006-07-01 | [PATCH] audit: rename AUDIT_SE_* constants | Darrel Goeddel | 1 | -25/+25 |
2006-07-01 | [PATCH] add rule filterkey | Amy Griffis | 1 | -36/+59 |
2006-06-20 | [PATCH] log more info for directory entry change events | Amy Griffis | 1 | -2/+6 |
2006-06-20 | [PATCH] fix AUDIT_FILTER_PREPEND handling | Amy Griffis | 1 | -0/+1 |
2006-06-20 | [PATCH] validate rule fields' types | Al Viro | 1 | -9/+48 |
2006-06-20 | [PATCH] audit: path-based rules | Amy Griffis | 1 | -40/+745 |
2006-06-20 | [PATCH] deprecate AUDIT_POSSBILE | Al Viro | 1 | -3/+5 |
2006-06-20 | [PATCH] fix audit_krule_to_{rule,data} return values | Amy Griffis | 1 | -2/+2 |
2006-06-20 | [PATCH] fix deadlocks in AUDIT_LIST/AUDIT_LIST_RULES | Al Viro | 1 | -35/+25 |
2006-05-01 | [PATCH] More user space subject labels | Steve Grubb | 1 | -7/+37 |
2006-05-01 | [PATCH] support for context based audit filtering, part 2 | Darrel Goeddel | 1 | -24/+221 |
2006-03-20 | [PATCH] sem2mutex: audit_netlink_sem | Ingo Molnar | 1 | -8/+8 |
2006-03-20 | [PATCH] Fix audit operators | Dustin Kirkland | 1 | -6/+12 |
2006-03-20 | [PATCH] add/remove rule update | Steve Grubb | 1 | -7/+9 |
2006-03-20 | [PATCH] audit string fields interface + consumer | Amy Griffis | 1 | -110/+357 |
2006-03-20 | [PATCH] Minor cosmetic cleanups to the code moved into auditfilter.c | David Woodhouse | 1 | -7/+4 |
2006-03-20 | [PATCH] Fix audit record filtering with !CONFIG_AUDITSYSCALL | David Woodhouse | 1 | -0/+378 |