aboutsummaryrefslogtreecommitdiffstats
path: root/kernel/auditsc.c
AgeCommit message (Expand)AuthorFilesLines
2013-04-11Audit: do not print error when LSMs disabledEric Paris1-6/+8
2013-04-10auditsc: remove audit_set_context() altogether - fold it into its callerAndrew Morton1-8/+2
2013-04-10auditsc: Use kzalloc instead of kmalloc+memset.Rakib Mullick1-4/+4
2013-04-10kernel: audit: beautify code, for extern function, better to check its parame...Chen Gang1-3/+6
2013-04-10audit: destroy long filenames correctlyDmitry Monakhov1-3/+3
2013-04-08audit: improve GID/EGID comparation logicMatvejchikov Ilya1-0/+14
2013-01-11audit: catch possible NULL audit buffersKees Cook1-2/+4
2013-01-11audit: create explicit AUDIT_SECCOMP event typeKees Cook1-3/+11
2012-12-12Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-81/+21
2012-11-28audit: no nested contexts anymore...Al Viro1-81/+21
2012-10-24audit: remove bogus tty name checkAlan Cox1-1/+1
2012-10-12audit: make audit_inode take struct filenameJeff Layton1-2/+23
2012-10-12audit: allow audit code to satisfy getname requests from its names_listJeff Layton1-0/+23
2012-10-12vfs: define struct filename and have getname() return itJeff Layton1-29/+35
2012-10-12audit: overhaul __audit_inode_child to accomodate retryingJeff Layton1-27/+30
2012-10-12audit: optimize audit_compare_dname_pathJeff Layton1-5/+3
2012-10-12audit: remove dirlen argument to audit_compare_dname_pathJeff Layton1-2/+2
2012-10-12audit: set the name_len in audit_inode for parent lookupsJeff Layton1-12/+29
2012-10-12audit: add a new "type" field to audit_names structJeff Layton1-5/+10
2012-10-12audit: reverse arguments to audit_inode_childJeff Layton1-4/+4
2012-10-12audit: no need to walk list in audit_inode if name is NULLJeff Layton1-1/+5
2012-10-12audit: pass in dentry to audit_copy_inode wherever possibleJeff Layton1-2/+2
2012-10-09mm: use mm->exe_file instead of first VM_EXECUTABLE vma->vm_fileKonstantin Khlebnikov1-11/+2
2012-10-02Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds1-45/+40
2012-09-18userns: Convert audit to work with user namespaces enabledEric W. Biederman1-20/+31
2012-09-17userns: Convert the audit loginuid to be a kuidEric W. Biederman1-9/+11
2012-09-17audit: Add typespecific uid and gid comparatorsEric W. Biederman1-79/+71
2012-09-12audit: export audit_log_task_infoPeter Moody1-40/+34
2012-04-14seccomp: remove duplicated failure loggingKees Cook1-2/+6
2012-01-23kernel-doc: fix new warnings in auditsc.cRandy Dunlap1-2/+3
2012-01-17audit: no leading space in audit_log_d_path prefixKees Cook1-3/+3
2012-01-17audit: fix signedness bug in audit_log_execve_info()Xi Wang1-2/+2
2012-01-17audit: comparison on interprocess fieldsPeter Moody1-0/+39
2012-01-17audit: implement all object interfield comparisonsPeter Moody1-0/+29
2012-01-17audit: allow interfield comparison between gid and ogidEric Paris1-0/+6
2012-01-17audit: complex interfield comparison helperEric Paris1-11/+39
2012-01-17audit: allow interfield comparison in audit rulesEric Paris1-1/+29
2012-01-17audit: do not call audit_getname on errorEric Paris1-3/+0
2012-01-17audit: only allow tasks to set their loginuid if it is -1Eric Paris1-1/+10
2012-01-17audit: remove task argument to audit_set_loginuidEric Paris1-3/+3
2012-01-17audit: allow audit matching on inode gidEric Paris1-0/+12
2012-01-17audit: allow matching on obj_uidEric Paris1-0/+12
2012-01-17audit: remove audit_finish_fork as it can't be calledEric Paris1-20/+0
2012-01-17audit: inline audit_free to simplify the look of generic codeEric Paris1-1/+1
2012-01-17audit: inline checks for not needing to collect aux recordsEric Paris1-12/+3
2012-01-17audit: drop some potentially inadvisable likely notationsEric Paris1-6/+6
2012-01-17audit: inline audit_syscall_entry to reduce burden on archsEric Paris1-1/+1
2012-01-17Audit: push audit success and retcode into arch ptrace.hEric Paris1-4/+12
2012-01-17seccomp: audit abnormal end to a process due to seccompEric Paris1-21/+29
2012-01-17audit: check current inode and containing object when filtering on major and ...Eric Paris1-10/+14
2012-01-17audit: dynamically allocate audit_names when not enough space is in the names...Eric Paris1-188/+215
2012-01-17audit: make filetype matching consistent with other filtersEric Paris1-10/+9
2012-01-03auditsc: propage umode_tAl Viro1-2/+2
2012-01-03switch kern_ipc_perm to umode_tAl Viro1-5/+5
2012-01-03switch mq_open() to umode_tAl Viro1-3/+3
2011-10-31kernel: Map most files to use export.h instead of module.hPaul Gortmaker1-1/+1
2011-07-26atomic: use <linux/atomic.h>Arun Sharma1-1/+1
2011-04-27audit: acquire creds selectively to reduce atomic op overheadTony Jones1-10/+17
2011-03-31Fix common misspellingsLucas De Marchi1-1/+1
2010-10-30audit mmapAl Viro1-0/+16
2010-08-11vfs: add helpers to get root and pwdMiklos Szeredi1-7/+2
2010-07-28fsnotify: rename fsnotify_mark_entry to just fsnotify_markEric Paris1-2/+2
2010-07-28inotify: remove inotify in kernel interfaceEric Paris1-1/+0
2010-07-28audit: reimplement audit_trees using fsnotify rather than inotifyEric Paris1-2/+2
2010-07-28Audit: clean up the audit_watch splitEric Paris1-3/+2
2010-04-05audit: preface audit printk with auditEric Paris1-1/+1
2010-03-30include cleanup: Update gfp.h and slab.h includes to prepare for breaking imp...Tejun Heo1-0/+1
2010-02-08Lose the first argument of audit_inode_child()Al Viro1-5/+2
2009-12-22Sanitize f_flags helpersAl Viro1-1/+0
2009-09-24Audit: rearrange audit_context to save 16 bytes per structEric Paris1-3/+3
2009-06-24Fix rule eviction order for AUDIT_DIRAl Viro1-0/+15
2009-06-24Audit: clean up all op= output to include string quotingEric Paris1-6/+2
2009-06-23audit: seperate audit inode watches into a subfileEric Paris1-3/+3
2009-06-23Audit: better estimation of execve record lengthEric Paris1-2/+2
2009-04-05Audit: remove spaces from audit_log_d_pathEric Paris1-1/+1
2009-04-05audit: audit_set_auditable defined but not usedEric Paris1-8/+8
2009-04-05audit: Fix possible return value truncation in audit_get_context()Paul Moore1-1/+1
2009-04-05auditsc: fix kernel-doc notationRandy Dunlap1-2/+2
2009-04-05audit: EXECVE record - removed bogus newlineJiri Pirko1-5/+4
2009-03-31Get rid of indirect include of fs_struct.hAl Viro1-0/+1
2009-01-04make sure that filterkey of task,always rules is reportedAl Viro1-4/+11
2009-01-04fixing audit rule ordering mess, part 1Al Viro1-36/+43
2009-01-04sanitize audit_log_capset()Al Viro1-28/+16
2009-01-04sanitize audit_fd_pair()Al Viro1-30/+14
2009-01-04sanitize audit_mq_open()Al Viro1-42/+23
2009-01-04sanitize AUDIT_MQ_SENDRECVAl Viro1-98/+29
2009-01-04sanitize audit_mq_notify()Al Viro1-40/+16
2009-01-04sanitize audit_mq_getsetattr()Al Viro1-37/+17
2009-01-04sanitize audit_ipc_set_perm()Al Viro1-33/+26
2009-01-04sanitize audit_ipc_obj()Al Viro1-51/+37
2009-01-04sanitize audit_socketcallAl Viro1-28/+38
2009-01-04don't reallocate buffer in every audit_sockaddr()Al Viro1-24/+22
2008-12-25Merge branch 'next' into for-linusJames Morris1-29/+226
2008-12-09[PATCH] fix broken timestamps in AVC generated by kernel threadsAl Viro1-1/+4
2008-12-09[patch 1/1] audit: remove excess kernel-docRandy Dunlap1-2/+0
2008-12-09[PATCH] return records for fork() both to child and parentAl Viro1-0/+17
2008-11-14CRED: Inaugurate COW credentialsDavid Howells1-21/+21
2008-11-14CRED: Use RCU to access another task's creds and to release a task's own credsDavid Howells1-14/+19
2008-11-14CRED: Separate task security context from task_structDavid Howells1-25/+27
2008-11-14CRED: Wrap task credential accesses in the core kernelDavid Howells1-2/+4
2008-11-11When the capset syscall is used it is not possible for audit to record theEric Paris1-0/+48
2008-11-11Any time fcaps or a setuid app under SECURE_NOROOT is used to result in aEric Paris1-0/+68
2008-11-11This patch will print cap_permitted and cap_inheritable data in the PATHEric Paris1-5/+77
2008-10-13tty: Fix abusers of current->sighand->ttyAlan Cox1-5/+4
2008-09-01[PATCH] audit: Moved variable declaration to beginning of functionCordelia1-1/+2
2008-08-04Re: [PATCH] Fix the kernel panic of audit_filter_task when key field is setzhangxiliang1-0/+7
2008-08-01[PATCH] Fix the kernel panic of audit_filter_task when key field is setzhangxiliang1-1/+1
2008-08-01[PATCH] Audit: Collect signal info when SIGUSR2 is sent to auditdEric Paris1-1/+1
2008-07-23x86_64 syscall audit fast-pathRoland McGrath1-1/+2
2008-04-28[PATCH] new predicate - AUDIT_FILETYPEAl Viro1-0/+16
2008-04-28[PATCH 2/2] audit: fix sparse shadowed variable warningsHarvey Harrison1-2/+0
2008-04-28[PATCH 1/2] audit: move extern declarations to audit.hHarvey Harrison1-6/+0
2008-04-28Audit: standardize string audit interfacesEric Paris1-4/+4
2008-04-28Audit: end printk with newlineEric Paris1-4/+4
2008-04-19Audit: Final renamings and cleanupAhmed S. Darwish1-6/+6
2008-04-19Audit: internally use the new LSM audit hooksAhmed S. Darwish1-5/+4
2008-04-19Audit: use new LSM hooks instead of SELinux exportsAhmed S. Darwish1-26/+29
2008-03-01[PATCH] Audit: Fix the format type for size_t variablesPaul Moore1-1/+1
2008-02-18Audit: use == not = in if statementsEric Paris1-1/+4
2008-02-14d_path: Use struct path in struct avc_audit_dataJan Blunck1-17/+11
2008-02-14Use struct path in fs_structJan Blunck1-2/+2
2008-02-01[AUDIT] create context if auditing was ever enabledEric Paris1-1/+2
2008-02-01[AUDIT] break large execve argument logging into smaller messagesEric Paris1-40/+165
2008-02-01[AUDIT] do not panic on exclude messages in audit_log_pid_context()Eric Paris1-1/+1
2008-02-01[AUDIT] Add End of Event recordEric Paris1-0/+5
2008-02-01[AUDIT] add session id to audit messagesEric Paris1-9/+27
2008-02-01[AUDIT] collect uid, loginuid, and comm in OBJ_PID recordsEric Paris1-5/+27
2008-02-01[AUDIT] return EINTR not ERESTART*Eric Paris1-1/+18
2008-02-01[PATCH] get rid of loginuid racesAl Viro1-41/+15
2008-02-01[PATCH] switch audit_get_loginuid() to task_struct *Al Viro1-2/+3
2007-10-22auditsc: fix kernel-doc param warningsRandy Dunlap1-2/+2
2007-10-21[PATCH] audit: watching subtreesAl Viro1-1/+220
2007-10-21[PATCH] pass dentry to audit_inode()/audit_inode_child()Al Viro1-2/+4
2007-10-18whitespace fixes: syscall auditingDaniel Walker1-5/+5
2007-10-17Clean up duplicate includes in kernel/Jesper Juhl1-1/+0
2007-10-09SUNRPC: Convert rpc_pipefs to use the generic filesystem notification hooksTrond Myklebust1-0/+1
2007-08-22kernel/auditsc.c: fix an off-by-oneAdrian Bunk1-1/+1
2007-08-07fix oops in __audit_signal_info()Al Viro1-11/+11
2007-07-28audit: fix two bugs in the new execve audit codePeter Zijlstra1-2/+4
2007-07-22[PATCH] get rid of AVC_PATH postponed treatmentAl Viro1-47/+0
2007-07-22[PATCH] Make IPC mode consistentSteve Grubb1-2/+2
2007-07-19mm: variable length argument supportOllie Wild1-1/+1
2007-07-19audit: rework execve auditPeter Zijlstra1-21/+63
2007-07-16kerneldoc fix in audit_core_dumpsHenrik Kretzschmar1-1/+1
2007-07-16Audit: add TTY input auditingMiloslav Trmac1-3/+0
2007-05-11[PATCH] Abnormal End of ProcessesSteve Grubb1-0/+39
2007-05-11[PATCH] match audit name dataAmy Griffis1-58/+84
2007-05-11[PATCH] complete message queue auditingAmy Griffis1-27/+0
2007-05-11[PATCH] initialize name osidAmy Griffis1-0/+1
2007-05-11[PATCH] audit signal recipientsAmy Griffis1-19/+92
2007-05-11[PATCH] auditing ptraceAl Viro1-0/+29
2007-03-14[PATCH] fix deadlock in audit_log_task_context()Al Viro1-13/+11
2007-02-17[PATCH] AUDIT_FD_PAIRAl Viro1-0/+40
2006-12-08[PATCH] struct path: convert kernelJosef Sipek1-2/+2
2006-12-08[PATCH] tty: ->signal->tty lockingPeter Zijlstra1-0/+2
2006-12-06audit: Add auditing to ipsecJoy Latten1-1/+5
2006-12-04[PATCH] severing skbuff.h -> highmem.hAl Viro1-0/+1
2006-10-04[PATCH] name_count array overrunSteve Grubb1-2/+17
2006-10-04[PATCH] PPID filtering fixAlexander Viro1-2/+7
2006-09-29[PATCH] audit/accounting: tty lockingAlan Cox1-0/+5
2006-09-26[PATCH] selinux: rename selinux_ctxid_to_stringStephen Smalley1-2/+2
2006-09-26[PATCH] selinux: eliminate selinux_task_ctxidStephen Smalley1-1/+1
2006-09-11[PATCH] audit: AUDIT_PERM supportAl Viro1-0/+51
2006-08-03[PATCH] take filling ->pid, etc. out of audit_get_context()Al Viro1-11/+12
2006-08-03[PATCH] don't bother with aux entires for dummy contextAl Viro1-3/+3
2006-08-03[PATCH] mark context of syscall entered with no rules as dummyAl Viro1-2/+4
2006-08-03[PATCH] introduce audit rules counterAl Viro1-0/+3
2006-08-03[PATCH] fix missed create event for directory auditAmy Griffis1-3/+13
2006-08-03[PATCH] fix faulty inode data collection for open() with O_CREATAmy Griffis1-22/+41
2006-07-01[PATCH] audit: support for object context filtersDarrel Goeddel1-0/+40
2006-07-01[PATCH] audit: rename AUDIT_SE_* constantsDarrel Goeddel1-5/+5
2006-07-01[PATCH] add rule filterkeyAmy Griffis1-0/+15
2006-06-27[PATCH] Remove redundant NULL checks before [kv]free - in kernel/Jesper Juhl1-2/+1
2006-06-27[PATCH] fix kernel-doc in kernel/ dirRandy Dunlap1-4/+3
2006-06-23[PATCH] Doc: add audit & acct to DocBookRandy Dunlap1-0/+1
2006-06-20[PATCH] make set_loginuid obey audit_enabledSteve Grubb1-11/+16
2006-06-20[PATCH] log more info for directory entry change eventsAmy Griffis1-54/+69
2006-06-20[PATCH] audit: path-based rulesAmy Griffis1-36/+88
2006-06-20[PATCH] Audit of POSIX Message Queue Syscalls v.2George C. Wilson1-1/+273
2006-06-20[PATCH] deprecate AUDIT_POSSBILEAl Viro1-1/+0
2006-06-20[PATCH] inline more audit helpersAl Viro1-10/+4
2006-06-20[PATCH] update of IPC audit record cleanupLinda Knippers1-17/+5
2006-06-20[PATCH] add filtering by ppidAl Viro1-0/+4
2006-06-20[PATCH] log ppidAl Viro1-2/+5
2006-06-20[PATCH] collect sid of those who send signals to auditdAl Viro1-11/+12
2006-06-20[PATCH] execve argument loggingAl Viro1-0/+51
2006-05-01[PATCH] Audit Filter PerformanceSteve Grubb1-4/+7
2006-05-01[PATCH] Rework of IPC auditingSteve Grubb1-3/+51
2006-05-01[PATCH] More user space subject labelsSteve Grubb1-2/+2
2006-05-01[PATCH] change lspp ipc auditingSteve Grubb1-47/+21
2006-05-01[PATCH] audit inode patchSteve Grubb1-37/+16
2006-05-01[PATCH] support for context based audit filtering, part 2Darrel Goeddel1-0/+20
2006-05-01[PATCH] no need to wank with task_lock() and pinning task down in audit_sysca...Al Viro1-9/+1
2006-05-01[PATCH] drop task argument of audit_syscall_{entry,exit}Al Viro1-4/+4
2006-05-01[PATCH] drop gfp_mask in audit_log_exit()Al Viro1-30/+32
2006-05-01[PATCH] move call of audit_free() into do_exit()Al Viro1-8/+1
2006-05-01[PATCH] deal with deadlocks in audit_free()Al Viro1-10/+10
2006-03-25Merge branch 'audit.b3' of git://git.kernel.org/pub/scm/linux/kernel/git/viro...Linus Torvalds1-400/+434
2006-03-20[PATCH] simplify audit_free() lockingIngo Molnar1-3/+7
2006-03-20[PATCH] Add tty to syscall audit recordsSteve Grubb1-2/+8