summaryrefslogtreecommitdiffstats
path: root/kernel/auditfilter.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* audit: mark expected switch fall-throughGustavo A. R. Silva2019-02-131-1/+1
* audit: remove unused actx param from audit_rule_matchRichard Guy Briggs2019-02-011-1/+1
* audit: add syscall information to CONFIG_CHANGE recordsRichard Guy Briggs2019-01-181-1/+1
* audit: rename FILTER_TYPE to FILTER_EXCLUDERichard Guy Briggs2018-06-191-5/+5
* audit: allow other filter list types for AUDIT_EXEOndrej Mosnáček2018-06-191-2/+5
* audit: use existing session info functionRichard Guy Briggs2018-05-181-3/+1
* audit: allow not equal op for audit by executableOndrej Mosnáček2018-04-241-1/+1
* audit: deprecate the AUDIT_FILTER_ENTRY filterRichard Guy Briggs2018-02-151-2/+2
* audit: session ID should not set arch quick field pointerRichard Guy Briggs2018-02-141-1/+0
* audit: filter PATH records keyed on filesystem magicRichard Guy Briggs2017-11-101-7/+32
* audit: kernel generated netlink traffic should have a portid of 0Paul Moore2017-05-021-8/+6
* audit: remove unnecessary semicolon in audit_field_valid()Nicholas Mc Guire2017-05-021-2/+2
* audit: add support for session ID user filterRichard Guy Briggs2016-11-291-0/+2
* audit: fix formatting of AUDIT_CONFIG_CHANGE eventsSteve Grubb2016-11-201-2/+1
* audit: add fields to exclude filter by reusing user filterRichard Guy Briggs2016-06-271-98/+53
* audit: fix some horrible switch statement style crimesPaul Moore2016-06-161-2/+6
* audit: fixup: log on errors from filter user rulesRichard Guy Briggs2016-05-311-2/+2
* audit: Fix typo in commentWei Yuan2016-02-081-3/+3
* audit: fix comment block whitespaceScott Matheina2015-11-041-7/+7
* audit: implement audit by executableRichard Guy Briggs2015-08-061-1/+52
* audit: clean simple fsnotify implementationRichard Guy Briggs2015-08-061-1/+1
* audit: make audit_del_rule() more robustRichard Guy Briggs2015-08-051-6/+6
* audit: fix uninitialized variable in audit_add_rule()Paul Moore2015-08-051-1/+1
* audit: eliminate unnecessary extra layer of watch referencesRichard Guy Briggs2015-08-051-13/+3
* Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds2015-02-121-2/+0
|\
| * audit: remove vestiges of vers_opsRichard Guy Briggs2015-01-201-2/+0
* | Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds2014-12-241-13/+10
|\|
| * audit: restore AUDIT_LOGINUID unset ABIRichard Guy Briggs2014-12-231-0/+10
| * audit: don't attempt to lookup PIDs when changing PID filtering audit rulesPaul Moore2014-12-201-13/+0
* | Merge git://git.infradead.org/users/eparis/auditLinus Torvalds2014-10-201-24/+32
|\|
| * audit: cull redundancy in audit_rule_changeRichard Guy Briggs2014-10-101-11/+7
| * audit: WARN if audit_rule_change called illegallyEric Paris2014-10-101-1/+2
| * audit: put rule existence check in canonical orderRichard Guy Briggs2014-10-101-1/+1
| * audit: use union for audit_field values since they are mutually exclusiveRichard Guy Briggs2014-09-231-9/+20
| * audit: invalid op= values for rulesBurn Alting2014-09-231-2/+2
* | kernel/auditfilter.c: replace count*size kmalloc by kcallocFabian Frederick2014-08-071-2/+2
|/
* Merge git://git.infradead.org/users/eparis/auditLinus Torvalds2014-04-121-8/+25
|\
| * audit: do not cast audit_rule_data pointers pointleslyEric Paris2014-04-021-2/+2
| * audit: anchor all pid references in the initial pid namespaceRichard Guy Briggs2014-03-201-1/+16
| * audit: Send replies in the proper network namespace.Eric W. Biederman2014-03-201-2/+5
| * audit: Use struct net not pid_t to remember the network namespce to reply inEric W. Biederman2014-03-201-1/+2
| * audit: Use more current logging style againRichard Guy Briggs2014-03-071-5/+7
* | audit: Update kdoc for audit_send_reply and audit_list_rules_sendEric W. Biederman2014-03-091-1/+1
* | audit: Send replies in the proper network namespace.Eric W. Biederman2014-03-011-2/+5
* | audit: Use struct net not pid_t to remember the network namespce to reply inEric W. Biederman2014-02-281-1/+2
|/
* audit: log on errors from filter user rulesRichard Guy Briggs2014-01-141-4/+7
* audit: convert all sessionid declaration to unsigned intEric Paris2014-01-141-1/+1
* audit: refactor audit_receive_msg() to clarify AUDIT_*_RULE* casesRichard Guy Briggs2014-01-141-30/+41
* audit: listen in all network namespacesRichard Guy Briggs2014-01-141-0/+1
* audit: fix netlink portid naming and typesRichard Guy Briggs2014-01-141-8/+10