aboutsummaryrefslogtreecommitdiffstats
path: root/kernel/auditsc.c
AgeCommit message (Expand)AuthorFilesLines
2017-07-05Merge branch 'stable-4.13' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-3/+9
2017-05-30audit: add ambient capabilities to CAPSET and BPRM_FCAPS recordsRichard Guy Briggs1-3/+9
2017-05-03Merge branch 'fsnotify' of git://git.kernel.org/pub/scm/linux/kernel/git/jack...Linus Torvalds1-2/+3
2017-05-02audit: Use timespec64 to represent audit timestampsDeepa Dinamani1-3/+3
2017-04-10fsnotify: Free fsnotify_mark_connector when there is no mark attachedJan Kara1-4/+2
2017-04-10fsnotify: Move mark list head from object into dedicated structureJan Kara1-2/+5
2017-03-27audit: move audit_signal_info() into kernel/auditsc.cPaul Moore1-12/+13
2017-03-21audit: fix auditd/kernel connection state trackingPaul Moore1-3/+3
2017-02-21Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-13/+27
2017-02-14audit: remove unnecessary curly braces from switch/case statementsPaul Moore1-12/+12
2017-02-13audit: log module name on init_moduleRichard Guy Briggs1-0/+14
2016-12-14Merge branch 'stable-4.10' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-2/+10
2016-12-14audit: Make AUDIT_ANOM_ABEND event normalizedSteve Grubb1-1/+1
2016-11-29audit: add support for session ID user filterRichard Guy Briggs1-0/+5
2016-11-20audit: skip sessionid sentinel value when auto-incrementingRichard Guy Briggs1-1/+4
2016-11-14audit: tame initialization warning len_abuf in audit_log_execve_infoRichard Guy Briggs1-1/+1
2016-10-04Merge branch 'stable-4.9' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-6/+6
2016-08-30audit: consistently record PIDs with task_tgid_nr()Paul Moore1-6/+6
2016-07-29Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-171/+171
2016-07-20audit: fix a double fetch in audit_log_single_execve_arg()Paul Moore1-168/+164
2016-07-14audit: fix whitespace in CWD recordSteve Grubb1-1/+1
2016-06-29Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-4/+4
2016-06-28audit: move audit_get_tty to reduce scope and kabi changesRichard Guy Briggs1-1/+0
2016-06-28audit: move calcs after alloc and check when logging set loginuidRichard Guy Briggs1-3/+4
2016-06-16audit: fix some horrible switch statement style crimesPaul Moore1-2/+6
2016-05-18Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-2/+6
2016-04-26audit: add tty field to LOGIN eventRichard Guy Briggs1-2/+6
2016-03-22auditsc: for seccomp events, log syscall compat state using in_compat_syscallAndy Lutomirski1-2/+2
2015-12-24security: Make inode argument of inode_getsecid non-constAndreas Gruenbacher1-3/+3
2015-09-08Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-3/+6
2015-08-06audit: implement audit by executableRichard Guy Briggs1-0/+3
2015-08-06audit: use macros for unset inode and device valuesRichard Guy Briggs1-3/+3
2015-07-08Fix broken audit tests for exec arg lenLinus Torvalds1-2/+1
2015-06-27Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-4/+2
2015-06-11audit: Fix check of return value of strnlen_user()Jan Kara1-1/+1
2015-05-29audit: obsolete audit_context check is removed in audit_filter_rules()Mikhail Klementyev1-3/+1
2015-04-26Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-3/+3
2015-04-22Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-8/+1
2015-04-15VFS: audit: d_backing_inode() annotationsDavid Howells1-3/+3
2015-02-23audit: consolidate handling of mm->exe_fileDavidlohr Bueso1-8/+1
2015-02-17Merge branch 'getname2' of git://git.kernel.org/pub/scm/linux/kernel/git/viro...Linus Torvalds1-136/+35
2015-01-25file->f_path.dentry is pinned down for as long as the file is open...Al Viro1-4/+1
2015-01-23audit: replace getname()/putname() hacks with reference countersPaul Moore1-94/+11
2015-01-23audit: fix filename matching in __audit_inode() and __audit_inode_child()Paul Moore1-9/+25
2015-01-23audit: enable filename recording via getname_kernel()Paul Moore1-37/+3
2014-12-31Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-9/+40
2014-12-30audit: create private file name copies when auditing inodesPaul Moore1-9/+40
2014-12-23Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-4/+10
2014-12-22audit: correctly record file names with different path name typesPaul Moore1-4/+10
2014-11-19new helper: audit_file()Al Viro1-0/+5
2014-11-19kill f_dentry usesAl Viro1-1/+1
2014-10-19Merge git://git.infradead.org/users/eparis/auditLinus Torvalds1-19/+9
2014-09-23audit: get comm using lock to avoid race in string printingRichard Guy Briggs1-1/+2
2014-09-23audit: remove open_arg() function that is never usedRichard Guy Briggs1-8/+0
2014-09-23audit: x86: drop arch from __audit_syscall_entry() interfaceRichard Guy Briggs1-4/+2
2014-09-23audit: add arch field to seccomp event logRichard Guy Briggs1-5/+4
2014-09-23audit: __audit_syscall_entry: ignore arch arg and call syscall_get_arch() dir...Richard Guy Briggs1-1/+1
2014-09-09Documentation: Docbook: Fix generated DocBook/kernel-api.xmlMasanari Iida1-1/+1
2014-06-10auditsc: audit_krule mask accesses need bounds checkingAndy Lutomirski1-9/+18
2014-04-12Merge git://git.infradead.org/users/eparis/auditLinus Torvalds1-33/+100
2014-03-20audit: remove stray newline from audit_log_execve_info() audit_panic() callJoe Perches1-1/+1
2014-03-20audit: include subject in login recordsEric Paris1-6/+4
2014-03-20audit: remove superfluous new- prefix in AUDIT_LOGIN messagesRichard Guy Briggs1-1/+1
2014-03-20audit: anchor all pid references in the initial pid namespaceRichard Guy Briggs1-7/+9
2014-03-20audit: convert PPIDs to the inital PID namespace.Richard Guy Briggs1-1/+1
2014-03-20audit: rename the misleading audit_get_context() to audit_take_context()Richard Guy Briggs1-3/+4
2014-03-20audit: Audit proc/<pid>/cmdline aka proctitleWilliam Roberts1-0/+67
2014-03-07audit: Use more current logging style againRichard Guy Briggs1-16/+15
2014-02-05execve: use 'struct filename *' for executable name passingLinus Torvalds1-1/+1
2014-01-13audit: fix dangling keywords in audit_log_set_loginuid() outputRichard Guy Briggs1-6/+9
2014-01-13audit: convert all sessionid declaration to unsigned intEric Paris1-1/+1
2014-01-13audit: Added exe field to audit core dump signal logPaul Davies C1-0/+8
2014-01-13audit: drop audit_log_abend()Paul Davies C1-8/+2
2014-01-13audit: don't generate loginuid log when audit disabledGao feng1-0/+3
2014-01-13audit: Simplify and correct audit_log_capsetEric W. Biederman1-4/+2
2013-11-06audit: fix type of sessionid in audit_set_loginuid()Eric Paris1-2/+2
2013-11-05audit: call audit_bprm() only once to add AUDIT_EXECVE informationRichard Guy Briggs1-4/+0
2013-11-05audit: move audit_aux_data_execve contents into audit_context unionRichard Guy Briggs1-29/+12
2013-11-05audit: remove unused envc member of audit_aux_data_execveRichard Guy Briggs1-2/+0
2013-11-05audit: Kill the unused struct audit_aux_data_capsetEric W. Biederman1-6/+0
2013-11-05audit: update AUDIT_INODE filter rule to comparator functionRichard Guy Briggs1-1/+1
2013-11-05audit: audit feature to set loginuid immutableEric Paris1-0/+3
2013-11-05audit: audit feature to only allow unsetting the loginuidEric Paris1-0/+3
2013-11-05audit: allow unsetting the loginuid (with priv)Eric Paris1-1/+3
2013-11-05audit: remove CONFIG_AUDIT_LOGINUID_IMMUTABLEEric Paris1-6/+4
2013-11-05audit: loginuid functions coding styleEric Paris1-25/+45
2013-11-05audit_alloc: clear TIF_SYSCALL_AUDIT if !audit_contextOleg Nesterov1-1/+3
2013-07-09audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_...Jeff Layton1-3/+9
2013-05-07audit: Make testing for a valid loginuid explicit.Eric W. Biederman1-1/+4
2013-04-30audit: fix event coverage of AUDIT_ANOM_LINKEric Paris1-352/+1
2013-04-30audit: use a consistent audit helper to log lsm informationEric Paris1-5/+5
2013-04-16audit: fix build break when AUDIT_DEBUG == 2Eric Paris1-3/+5
2013-04-11Audit: do not print error when LSMs disabledEric Paris1-6/+8
2013-04-10auditsc: remove audit_set_context() altogether - fold it into its callerAndrew Morton1-8/+2
2013-04-10auditsc: Use kzalloc instead of kmalloc+memset.Rakib Mullick1-4/+4
2013-04-10kernel: audit: beautify code, for extern function, better to check its parame...Chen Gang1-3/+6
2013-04-10audit: destroy long filenames correctlyDmitry Monakhov1-3/+3
2013-04-08audit: improve GID/EGID comparation logicMatvejchikov Ilya1-0/+14
2013-01-11audit: catch possible NULL audit buffersKees Cook1-2/+4
2013-01-11audit: create explicit AUDIT_SECCOMP event typeKees Cook1-3/+11
2012-12-12Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-81/+21
2012-11-28audit: no nested contexts anymore...Al Viro1-81/+21
2012-10-24audit: remove bogus tty name checkAlan Cox1-1/+1
2012-10-12audit: make audit_inode take struct filenameJeff Layton1-2/+23
2012-10-12audit: allow audit code to satisfy getname requests from its names_listJeff Layton1-0/+23
2012-10-12vfs: define struct filename and have getname() return itJeff Layton1-29/+35
2012-10-12audit: overhaul __audit_inode_child to accomodate retryingJeff Layton1-27/+30
2012-10-12audit: optimize audit_compare_dname_pathJeff Layton1-5/+3
2012-10-12audit: remove dirlen argument to audit_compare_dname_pathJeff Layton1-2/+2
2012-10-12audit: set the name_len in audit_inode for parent lookupsJeff Layton1-12/+29
2012-10-12audit: add a new "type" field to audit_names structJeff Layton1-5/+10
2012-10-12audit: reverse arguments to audit_inode_childJeff Layton1-4/+4
2012-10-12audit: no need to walk list in audit_inode if name is NULLJeff Layton1-1/+5
2012-10-12audit: pass in dentry to audit_copy_inode wherever possibleJeff Layton1-2/+2
2012-10-09mm: use mm->exe_file instead of first VM_EXECUTABLE vma->vm_fileKonstantin Khlebnikov1-11/+2
2012-10-02Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds1-45/+40
2012-09-18userns: Convert audit to work with user namespaces enabledEric W. Biederman1-20/+31
2012-09-17userns: Convert the audit loginuid to be a kuidEric W. Biederman1-9/+11
2012-09-17audit: Add typespecific uid and gid comparatorsEric W. Biederman1-79/+71
2012-09-12audit: export audit_log_task_infoPeter Moody1-40/+34
2012-04-14seccomp: remove duplicated failure loggingKees Cook1-2/+6
2012-01-23kernel-doc: fix new warnings in auditsc.cRandy Dunlap1-2/+3
2012-01-17audit: no leading space in audit_log_d_path prefixKees Cook1-3/+3
2012-01-17audit: fix signedness bug in audit_log_execve_info()Xi Wang1-2/+2
2012-01-17audit: comparison on interprocess fieldsPeter Moody1-0/+39
2012-01-17audit: implement all object interfield comparisonsPeter Moody1-0/+29
2012-01-17audit: allow interfield comparison between gid and ogidEric Paris1-0/+6
2012-01-17audit: complex interfield comparison helperEric Paris1-11/+39
2012-01-17audit: allow interfield comparison in audit rulesEric Paris1-1/+29
2012-01-17audit: do not call audit_getname on errorEric Paris1-3/+0
2012-01-17audit: only allow tasks to set their loginuid if it is -1Eric Paris1-1/+10
2012-01-17audit: remove task argument to audit_set_loginuidEric Paris1-3/+3
2012-01-17audit: allow audit matching on inode gidEric Paris1-0/+12
2012-01-17audit: allow matching on obj_uidEric Paris1-0/+12
2012-01-17audit: remove audit_finish_fork as it can't be calledEric Paris1-20/+0
2012-01-17audit: inline audit_free to simplify the look of generic codeEric Paris1-1/+1
2012-01-17audit: inline checks for not needing to collect aux recordsEric Paris1-12/+3
2012-01-17audit: drop some potentially inadvisable likely notationsEric Paris1-6/+6
2012-01-17audit: inline audit_syscall_entry to reduce burden on archsEric Paris1-1/+1
2012-01-17Audit: push audit success and retcode into arch ptrace.hEric Paris1-4/+12
2012-01-17seccomp: audit abnormal end to a process due to seccompEric Paris1-21/+29
2012-01-17audit: check current inode and containing object when filtering on major and ...Eric Paris1-10/+14
2012-01-17audit: dynamically allocate audit_names when not enough space is in the names...Eric Paris1-188/+215
2012-01-17audit: make filetype matching consistent with other filtersEric Paris1-10/+9
2012-01-03auditsc: propage umode_tAl Viro1-2/+2
2012-01-03switch kern_ipc_perm to umode_tAl Viro1-5/+5
2012-01-03switch mq_open() to umode_tAl Viro1-3/+3
2011-10-31kernel: Map most files to use export.h instead of module.hPaul Gortmaker1-1/+1
2011-07-26atomic: use <linux/atomic.h>Arun Sharma1-1/+1
2011-04-27audit: acquire creds selectively to reduce atomic op overheadTony Jones1-10/+17
2011-03-31Fix common misspellingsLucas De Marchi1-1/+1
2010-10-30audit mmapAl Viro1-0/+16
2010-08-11vfs: add helpers to get root and pwdMiklos Szeredi1-7/+2
2010-07-28fsnotify: rename fsnotify_mark_entry to just fsnotify_markEric Paris1-2/+2
2010-07-28inotify: remove inotify in kernel interfaceEric Paris1-1/+0
2010-07-28audit: reimplement audit_trees using fsnotify rather than inotifyEric Paris1-2/+2
2010-07-28Audit: clean up the audit_watch splitEric Paris1-3/+2
2010-04-05audit: preface audit printk with auditEric Paris1-1/+1
2010-03-30include cleanup: Update gfp.h and slab.h includes to prepare for breaking imp...Tejun Heo1-0/+1
2010-02-08Lose the first argument of audit_inode_child()Al Viro1-5/+2
2009-12-22Sanitize f_flags helpersAl Viro1-1/+0
2009-09-24Audit: rearrange audit_context to save 16 bytes per structEric Paris1-3/+3
2009-06-24Fix rule eviction order for AUDIT_DIRAl Viro1-0/+15
2009-06-24Audit: clean up all op= output to include string quotingEric Paris1-6/+2
2009-06-23audit: seperate audit inode watches into a subfileEric Paris1-3/+3
2009-06-23Audit: better estimation of execve record lengthEric Paris1-2/+2
2009-04-05Audit: remove spaces from audit_log_d_pathEric Paris1-1/+1
2009-04-05audit: audit_set_auditable defined but not usedEric Paris1-8/+8
2009-04-05audit: Fix possible return value truncation in audit_get_context()Paul Moore1-1/+1
2009-04-05auditsc: fix kernel-doc notationRandy Dunlap1-2/+2
2009-04-05audit: EXECVE record - removed bogus newlineJiri Pirko1-5/+4
2009-03-31Get rid of indirect include of fs_struct.hAl Viro1-0/+1
2009-01-04make sure that filterkey of task,always rules is reportedAl Viro1-4/+11
2009-01-04fixing audit rule ordering mess, part 1Al Viro1-36/+43
2009-01-04sanitize audit_log_capset()Al Viro1-28/+16
2009-01-04sanitize audit_fd_pair()Al Viro1-30/+14
2009-01-04sanitize audit_mq_open()Al Viro1-42/+23
2009-01-04sanitize AUDIT_MQ_SENDRECVAl Viro1-98/+29
2009-01-04sanitize audit_mq_notify()Al Viro1-40/+16
2009-01-04sanitize audit_mq_getsetattr()Al Viro1-37/+17
2009-01-04sanitize audit_ipc_set_perm()Al Viro1-33/+26
2009-01-04sanitize audit_ipc_obj()Al Viro1-51/+37
2009-01-04sanitize audit_socketcallAl Viro1-28/+38
2009-01-04don't reallocate buffer in every audit_sockaddr()Al Viro1-24/+22
2008-12-25Merge branch 'next' into for-linusJames Morris1-29/+226
2008-12-09[PATCH] fix broken timestamps in AVC generated by kernel threadsAl Viro1-1/+4
2008-12-09[patch 1/1] audit: remove excess kernel-docRandy Dunlap1-2/+0
2008-12-09[PATCH] return records for fork() both to child and parentAl Viro1-0/+17
2008-11-14CRED: Inaugurate COW credentialsDavid Howells1-21/+21
2008-11-14CRED: Use RCU to access another task's creds and to release a task's own credsDavid Howells1-14/+19
2008-11-14CRED: Separate task security context from task_structDavid Howells1-25/+27
2008-11-14CRED: Wrap task credential accesses in the core kernelDavid Howells1-2/+4
2008-11-11When the capset syscall is used it is not possible for audit to record theEric Paris1-0/+48
2008-11-11Any time fcaps or a setuid app under SECURE_NOROOT is used to result in aEric Paris1-0/+68
2008-11-11This patch will print cap_permitted and cap_inheritable data in the PATHEric Paris1-5/+77
2008-10-13tty: Fix abusers of current->sighand->ttyAlan Cox1-5/+4
2008-09-01[PATCH] audit: Moved variable declaration to beginning of functionCordelia1-1/+2
2008-08-04Re: [PATCH] Fix the kernel panic of audit_filter_task when key field is setzhangxiliang1-0/+7
2008-08-01[PATCH] Fix the kernel panic of audit_filter_task when key field is setzhangxiliang1-1/+1
2008-08-01[PATCH] Audit: Collect signal info when SIGUSR2 is sent to auditdEric Paris1-1/+1
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-31 07:50:01 +0000