aboutsummaryrefslogtreecommitdiffstats
path: root/kernel/auditsc.c
AgeCommit message (Expand)AuthorFilesLines
2023-10-13audit,io_uring: io_uring openat triggers audit reference count underflowDan Clash1-4/+4
2023-09-07Merge tag 'net-6.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netd...Linus Torvalds1-0/+2
2023-08-31netfilter: nf_tables: Audit log rule resetPhil Sutter1-0/+1
2023-08-31netfilter: nf_tables: Audit log setelem resetPhil Sutter1-0/+1
2023-08-15audit: cleanup function braces and assignment-in-if-conditionAtul Kumar Pant1-2/+4
2023-08-15audit: add space before parenthesis and around '=', "==", and '<'Atul Kumar Pant1-1/+1
2023-08-08audit: fix possible soft lockup in __audit_inode_child()Gaosheng Cui1-0/+2
2023-03-01capability: just use a 'u64' instead of a 'u32[2]' arrayLinus Torvalds1-5/+1
2023-02-20Merge tag 'fsnotify_for_v6.3-rc1' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds1-3/+15
2023-02-07fanotify,audit: Allow audit to use the full permission event responseRichard Guy Briggs1-3/+15
2023-02-07fanotify: Ensure consistent variable type for responseRichard Guy Briggs1-1/+1
2023-01-19fs: port xattr to mnt_idmapChristian Brauner1-2/+2
2022-10-17audit: unify audit_filter_{uring(), inode_name(), syscall()}Ankur Arora1-37/+39
2022-10-17audit: cache ctx->major in audit_filter_syscall()Ankur Arora1-1/+2
2022-10-04Merge tag 'audit-pr-20221003' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-5/+5
2022-08-26audit: free audit_proctitle only on task exitRichard Guy Briggs1-1/+1
2022-08-26audit: explicitly check audit_context->context enum valueRichard Guy Briggs1-1/+1
2022-08-26audit: audit_context pid unused, context enum comment fixRichard Guy Briggs1-2/+2
2022-08-25audit: move audit_return_fixup before the filtersRichard Guy Briggs1-2/+2
2022-08-15audit: fix repeated words in commentsJilin Yuan1-1/+1
2022-08-04audit, io_uring, io-wq: Fix memory leak in io_sq_thread() and io_wqe_worker()Peilin Ye1-25/+0
2022-06-15audit: free module nameChristian Göttsche1-1/+1
2022-05-17audit,io_uring,io-wq: call __audit_uring_exit for dummy contextsJulian Orth1-0/+6
2022-03-21Merge tag 'audit-pr-20220321' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-20/+67
2022-02-22audit: log AUDIT_TIME_* records only from rulesRichard Guy Briggs1-20/+67
2022-02-09audit: don't deref the syscall args when checking the openat2 open_how::flagsPaul Moore1-1/+1
2021-11-22lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()Paul Moore1-1/+10
2021-11-01Merge tag 'audit-pr-20211101' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-22/+29
2021-11-01Merge tag 'selinux-pr-20211101' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-100/+368
2021-10-18audit: return early if the filter rule has a lower priorityGaosheng Cui1-2/+3
2021-10-18audit: fix possible null-pointer dereference in audit_filter_rulesGaosheng Cui1-1/+1
2021-10-04audit: add OPENAT2 record to list "how" infoRichard Guy Briggs1-1/+17
2021-10-01audit: add support for the openat2 syscallRichard Guy Briggs1-0/+3
2021-10-01audit: replace magic audit syscall class numbers with macrosRichard Guy Briggs1-6/+6
2021-09-19audit: add filtering for io_uring recordsPaul Moore1-14/+46
2021-09-19audit,io_uring,io-wq: add some basic audit support to io_uringPaul Moore1-0/+166
2021-09-19audit: prepare audit_context for use in calling contexts beyond syscallsPaul Moore1-93/+163
2021-09-14audit: Convert to SPDX identifierCai Huoqing1-14/+1
2021-06-10audit: remove trailing spaces and tabsZhen Lei1-4/+4
2021-06-08audit: Rename enum audit_state constants to avoid AUDIT_DISABLED redefinitionSergey Nazarov1-17/+17
2021-05-10audit: add blank line after variable declarationsRoni Nevalainen1-0/+21
2021-04-27Merge tag 'audit-pr-20210426' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-7/+4
2021-03-22lsm: separate security_task_getsecid() into subjective and objective variantsPaul Moore1-4/+4
2021-03-12audit: further cleanup of AUDIT_FILTER_ENTRY deprecationRichard Guy Briggs1-7/+4
2021-02-23Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds1-2/+3
2021-01-27audit: Make audit_filter_syscall() return voidYang Yang1-8/+8
2021-01-24commoncap: handle idmapped mountsChristian Brauner1-2/+3
2020-12-16Merge tag 'audit-pr-20201214' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-26/+12
2020-11-24audit: fix macros warningsAlex Shi1-6/+5
2020-11-16audit: Migrate to use SYSCALL_WORK flagGabriel Krisman Bertazi1-2/+2
2020-10-27audit: trigger accompanying records when no rules presentRichard Guy Briggs1-20/+7
2020-08-04Merge tag 'audit-pr-20200803' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-7/+38
2020-07-29revert: 1320a4052ea1 ("audit: trigger accompanying records when no rules pres...Paul Moore1-0/+3
2020-07-08audit: issue CWD record to accompany LSM_AUDIT_DATA_* recordsRichard Guy Briggs1-2/+15
2020-06-29audit: add gfp parameter to audit_log_nfcfgRichard Guy Briggs1-2/+2
2020-06-23audit: log nftables configuration change eventsRichard Guy Briggs1-3/+21
2020-05-20audit: add subj creds to NETFILTER_CFG record toRichard Guy Briggs1-0/+6
2020-05-01audit: make symbol 'audit_nfcfgs' staticZheng Bin1-1/+1
2020-04-28netfilter: add audit table unregister actionsRichard Guy Briggs1-2/+3
2020-04-28audit: tidy and extend netfilter_cfg x_tablesRichard Guy Briggs1-0/+24
2020-03-12audit: trigger accompanying records when no rules presentRichard Guy Briggs1-3/+0
2019-05-28audit: enforce op for string fieldsRichard Guy Briggs1-3/+15
2019-05-23audit: add saddr_fam filter fieldRichard Guy Briggs1-0/+5
2019-05-21audit: deliver signal_info regarless of syscallRichard Guy Briggs1-16/+3
2019-05-07Merge branch 'work.dcache' of git://git.kernel.org/pub/scm/linux/kernel/git/v...Linus Torvalds1-2/+2
2019-04-28audit_compare_dname_path(): switch to const struct qstr *Al Viro1-2/+2
2019-04-15ntp: Audit NTP parameters adjustmentOndrej Mosnacek1-0/+22
2019-04-15timekeeping: Audit clock adjustmentsOndrej Mosnacek1-0/+7
2019-04-08audit: purge unnecessary list_empty callsRichard Guy Briggs1-37/+27
2019-03-20syscall_get_arch: add "struct task_struct *" argumentDmitry V. Levin1-2/+2
2019-03-20audit: Make audit_log_cap and audit_copy_inode staticYueHaibing1-3/+5
2019-03-18audit: fix a memleak caused by auditing load moduleLi RongQing1-1/+9
2019-02-03audit: remove audit_context when CONFIG_ AUDIT and not AUDITSYSCALLRichard Guy Briggs1-0/+158
2019-01-31audit: remove unused actx param from audit_rule_matchRichard Guy Briggs1-9/+12
2019-01-30audit: ignore fcaps on umountRichard Guy Briggs1-3/+3
2019-01-25audit: more filter PATH records keyed on filesystem magicRichard Guy Briggs1-8/+27
2019-01-25audit: add support for fcaps v3Richard Guy Briggs1-0/+4
2019-01-25audit: move loginuid and sessionid from CONFIG_AUDITSYSCALL to CONFIG_AUDITRichard Guy Briggs1-84/+0
2019-01-14audit: hand taken context to audit_kill_trees for syscall loggingRichard Guy Briggs1-6/+6
2018-11-26audit: use current whenever possiblePaul Moore1-68/+63
2018-11-26audit: minimize our use of audit_log_format()Paul Moore1-4/+3
2018-11-19audit: remove WATCH and TREE config optionsRichard Guy Briggs1-10/+0
2018-11-05audit: print empty EXECVE argsRichard Guy Briggs1-1/+1
2018-08-15Merge tag 'audit-pr-20180814' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-7/+7
2018-07-30audit: fix potential null dereference 'context->module.name'Yi Wang1-4/+9
2018-07-17audit: use ktime_get_coarse_real_ts64() for timestampsPaul Moore1-1/+1
2018-07-03audit: use ktime_get_coarse_ts64() for time accessArnd Bergmann1-1/+1
2018-06-19audit: Fix extended comparison of GID/EGIDOndrej Mosnáček1-4/+4
2018-06-19audit: tie ANOM_ABEND records to syscallRichard Guy Briggs1-1/+1
2018-06-19audit: tie SECCOMP records to syscallRichard Guy Briggs1-1/+1
2018-05-21audit: Fix wrong task in comparison of session IDOndrej Mosnáček1-1/+1
2018-05-17audit: normalize loginuid read accessRichard Guy Briggs1-9/+15
2018-05-17audit: use new audit_context access funciton for seccomp_actions_loggedRichard Guy Briggs1-1/+1
2018-05-14audit: use inline function to set audit contextRichard Guy Briggs1-4/+3
2018-05-14audit: use inline function to get audit contextRichard Guy Briggs1-34/+32
2018-05-14audit: convert sessionid unset to a macroRichard Guy Briggs1-2/+2
2018-05-08seccomp: Don't special case audited processes when loggingTyler Hicks1-1/+13
2018-05-08seccomp: Audit attempts to modify the actions_logged sysctlTyler Hicks1-0/+20
2018-04-24audit: allow not equal op for audit by executableOndrej Mosnáček1-0/+2
2018-02-15audit: bail before bug check if audit disabledRichard Guy Briggs1-4/+1
2018-02-15audit: deprecate the AUDIT_FILTER_ENTRY filterRichard Guy Briggs1-10/+11
2017-11-15Merge tag 'audit-pr-20171113' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-0/+23
2017-11-10audit: filter PATH records keyed on filesystem magicRichard Guy Briggs1-0/+23
2017-10-10audit: Record fanotify access control decisionsSteve Grubb1-0/+6
2017-09-14Merge branch 'work.ipc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro...Linus Torvalds1-6/+6
2017-09-05audit: update the function commentsGeliang Tang1-9/+9
2017-09-05audit: Reduce overhead using a coarse clockMel Gorman1-1/+1
2017-09-03ipc: mqueue: Replace timespec with timespec64Deepa Dinamani1-6/+6
2017-07-05Merge branch 'stable-4.13' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-3/+9
2017-05-30audit: add ambient capabilities to CAPSET and BPRM_FCAPS recordsRichard Guy Briggs1-3/+9
2017-05-03Merge branch 'fsnotify' of git://git.kernel.org/pub/scm/linux/kernel/git/jack...Linus Torvalds1-2/+3
2017-05-02audit: Use timespec64 to represent audit timestampsDeepa Dinamani1-3/+3
2017-04-10fsnotify: Free fsnotify_mark_connector when there is no mark attachedJan Kara1-4/+2
2017-04-10fsnotify: Move mark list head from object into dedicated structureJan Kara1-2/+5
2017-03-27audit: move audit_signal_info() into kernel/auditsc.cPaul Moore1-12/+13
2017-03-21audit: fix auditd/kernel connection state trackingPaul Moore1-3/+3
2017-02-21Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-13/+27
2017-02-14audit: remove unnecessary curly braces from switch/case statementsPaul Moore1-12/+12
2017-02-13audit: log module name on init_moduleRichard Guy Briggs1-0/+14
2016-12-14Merge branch 'stable-4.10' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-2/+10
2016-12-14audit: Make AUDIT_ANOM_ABEND event normalizedSteve Grubb1-1/+1
2016-11-29audit: add support for session ID user filterRichard Guy Briggs1-0/+5
2016-11-20audit: skip sessionid sentinel value when auto-incrementingRichard Guy Briggs1-1/+4
2016-11-14audit: tame initialization warning len_abuf in audit_log_execve_infoRichard Guy Briggs1-1/+1
2016-10-04Merge branch 'stable-4.9' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-6/+6
2016-08-30audit: consistently record PIDs with task_tgid_nr()Paul Moore1-6/+6
2016-07-29Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-171/+171
2016-07-20audit: fix a double fetch in audit_log_single_execve_arg()Paul Moore1-168/+164
2016-07-14audit: fix whitespace in CWD recordSteve Grubb1-1/+1
2016-06-29Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-4/+4
2016-06-28audit: move audit_get_tty to reduce scope and kabi changesRichard Guy Briggs1-1/+0
2016-06-28audit: move calcs after alloc and check when logging set loginuidRichard Guy Briggs1-3/+4
2016-06-16audit: fix some horrible switch statement style crimesPaul Moore1-2/+6
2016-05-18Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-2/+6
2016-04-26audit: add tty field to LOGIN eventRichard Guy Briggs1-2/+6
2016-03-22auditsc: for seccomp events, log syscall compat state using in_compat_syscallAndy Lutomirski1-2/+2
2015-12-24security: Make inode argument of inode_getsecid non-constAndreas Gruenbacher1-3/+3
2015-09-08Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-3/+6
2015-08-06audit: implement audit by executableRichard Guy Briggs1-0/+3
2015-08-06audit: use macros for unset inode and device valuesRichard Guy Briggs1-3/+3
2015-07-08Fix broken audit tests for exec arg lenLinus Torvalds1-2/+1
2015-06-27Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-4/+2
2015-06-11audit: Fix check of return value of strnlen_user()Jan Kara1-1/+1
2015-05-29audit: obsolete audit_context check is removed in audit_filter_rules()Mikhail Klementyev1-3/+1
2015-04-26Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-3/+3
2015-04-22Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-8/+1
2015-04-15VFS: audit: d_backing_inode() annotationsDavid Howells1-3/+3
2015-02-23audit: consolidate handling of mm->exe_fileDavidlohr Bueso1-8/+1
2015-02-17Merge branch 'getname2' of git://git.kernel.org/pub/scm/linux/kernel/git/viro...Linus Torvalds1-136/+35
2015-01-25file->f_path.dentry is pinned down for as long as the file is open...Al Viro1-4/+1
2015-01-23audit: replace getname()/putname() hacks with reference countersPaul Moore1-94/+11
2015-01-23audit: fix filename matching in __audit_inode() and __audit_inode_child()Paul Moore1-9/+25
2015-01-23audit: enable filename recording via getname_kernel()Paul Moore1-37/+3
2014-12-31Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-9/+40
2014-12-30audit: create private file name copies when auditing inodesPaul Moore1-9/+40
2014-12-23Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-4/+10
2014-12-22audit: correctly record file names with different path name typesPaul Moore1-4/+10
2014-11-19new helper: audit_file()Al Viro1-0/+5
2014-11-19kill f_dentry usesAl Viro1-1/+1
2014-10-19Merge git://git.infradead.org/users/eparis/auditLinus Torvalds1-19/+9
2014-09-23audit: get comm using lock to avoid race in string printingRichard Guy Briggs1-1/+2
2014-09-23audit: remove open_arg() function that is never usedRichard Guy Briggs1-8/+0
2014-09-23audit: x86: drop arch from __audit_syscall_entry() interfaceRichard Guy Briggs1-4/+2
2014-09-23audit: add arch field to seccomp event logRichard Guy Briggs1-5/+4
2014-09-23audit: __audit_syscall_entry: ignore arch arg and call syscall_get_arch() dir...Richard Guy Briggs1-1/+1
2014-09-09Documentation: Docbook: Fix generated DocBook/kernel-api.xmlMasanari Iida1-1/+1
2014-06-10auditsc: audit_krule mask accesses need bounds checkingAndy Lutomirski1-9/+18
2014-04-12Merge git://git.infradead.org/users/eparis/auditLinus Torvalds1-33/+100
2014-03-20audit: remove stray newline from audit_log_execve_info() audit_panic() callJoe Perches1-1/+1
2014-03-20audit: include subject in login recordsEric Paris1-6/+4
2014-03-20audit: remove superfluous new- prefix in AUDIT_LOGIN messagesRichard Guy Briggs1-1/+1
2014-03-20audit: anchor all pid references in the initial pid namespaceRichard Guy Briggs1-7/+9
2014-03-20audit: convert PPIDs to the inital PID namespace.Richard Guy Briggs1-1/+1
2014-03-20audit: rename the misleading audit_get_context() to audit_take_context()Richard Guy Briggs1-3/+4
2014-03-20audit: Audit proc/<pid>/cmdline aka proctitleWilliam Roberts1-0/+67
2014-03-07audit: Use more current logging style againRichard Guy Briggs1-16/+15
2014-02-05execve: use 'struct filename *' for executable name passingLinus Torvalds1-1/+1
2014-01-13audit: fix dangling keywords in audit_log_set_loginuid() outputRichard Guy Briggs1-6/+9
2014-01-13audit: convert all sessionid declaration to unsigned intEric Paris1-1/+1
2014-01-13audit: Added exe field to audit core dump signal logPaul Davies C1-0/+8
2014-01-13audit: drop audit_log_abend()Paul Davies C1-8/+2
2014-01-13audit: don't generate loginuid log when audit disabledGao feng1-0/+3
2014-01-13audit: Simplify and correct audit_log_capsetEric W. Biederman1-4/+2
2013-11-06audit: fix type of sessionid in audit_set_loginuid()Eric Paris1-2/+2
2013-11-05audit: call audit_bprm() only once to add AUDIT_EXECVE informationRichard Guy Briggs1-4/+0
2013-11-05audit: move audit_aux_data_execve contents into audit_context unionRichard Guy Briggs1-29/+12
2013-11-05audit: remove unused envc member of audit_aux_data_execveRichard Guy Briggs1-2/+0
2013-11-05audit: Kill the unused struct audit_aux_data_capsetEric W. Biederman1-6/+0
2013-11-05audit: update AUDIT_INODE filter rule to comparator functionRichard Guy Briggs1-1/+1
2013-11-05audit: audit feature to set loginuid immutableEric Paris1-0/+3
2013-11-05audit: audit feature to only allow unsetting the loginuidEric Paris1-0/+3
2013-11-05audit: allow unsetting the loginuid (with priv)Eric Paris1-1/+3
2013-11-05audit: remove CONFIG_AUDIT_LOGINUID_IMMUTABLEEric Paris1-6/+4
2013-11-05audit: loginuid functions coding styleEric Paris1-25/+45
2013-11-05audit_alloc: clear TIF_SYSCALL_AUDIT if !audit_contextOleg Nesterov1-1/+3
2013-07-09audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_...Jeff Layton1-3/+9
2013-05-07audit: Make testing for a valid loginuid explicit.Eric W. Biederman1-1/+4
2013-04-30audit: fix event coverage of AUDIT_ANOM_LINKEric Paris1-352/+1
2013-04-30audit: use a consistent audit helper to log lsm informationEric Paris1-5/+5
2013-04-16audit: fix build break when AUDIT_DEBUG == 2Eric Paris1-3/+5
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-08 19:43:34 +0000