summaryrefslogtreecommitdiffstats
path: root/kernel/auditsc.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* audit: remove audit_context when CONFIG_ AUDIT and not AUDITSYSCALLRichard Guy Briggs2019-02-031-0/+158
* audit: remove unused actx param from audit_rule_matchRichard Guy Briggs2019-02-011-9/+12
* audit: ignore fcaps on umountRichard Guy Briggs2019-01-311-3/+3
* audit: more filter PATH records keyed on filesystem magicRichard Guy Briggs2019-01-251-8/+27
* audit: add support for fcaps v3Richard Guy Briggs2019-01-251-0/+4
* audit: move loginuid and sessionid from CONFIG_AUDITSYSCALL to CONFIG_AUDITRichard Guy Briggs2019-01-251-84/+0
* audit: hand taken context to audit_kill_trees for syscall loggingRichard Guy Briggs2019-01-151-6/+6
* audit: use current whenever possiblePaul Moore2018-11-271-68/+63
* audit: minimize our use of audit_log_format()Paul Moore2018-11-271-4/+3
* audit: remove WATCH and TREE config optionsRichard Guy Briggs2018-11-191-10/+0
* audit: print empty EXECVE argsRichard Guy Briggs2018-11-051-1/+1
* Merge tag 'audit-pr-20180814' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2018-08-151-7/+7
|\
| * audit: use ktime_get_coarse_real_ts64() for timestampsPaul Moore2018-07-171-1/+1
| * audit: use ktime_get_coarse_ts64() for time accessArnd Bergmann2018-07-031-1/+1
| * audit: Fix extended comparison of GID/EGIDOndrej Mosnáček2018-06-191-4/+4
| * audit: tie ANOM_ABEND records to syscallRichard Guy Briggs2018-06-191-1/+1
| * audit: tie SECCOMP records to syscallRichard Guy Briggs2018-06-191-1/+1
* | audit: fix potential null dereference 'context->module.name'Yi Wang2018-07-311-4/+9
|/
* audit: Fix wrong task in comparison of session IDOndrej Mosnáček2018-05-211-1/+1
* audit: normalize loginuid read accessRichard Guy Briggs2018-05-171-9/+15
* audit: use new audit_context access funciton for seccomp_actions_loggedRichard Guy Briggs2018-05-171-1/+1
* audit: use inline function to set audit contextRichard Guy Briggs2018-05-141-4/+3
* audit: use inline function to get audit contextRichard Guy Briggs2018-05-141-34/+32
* audit: convert sessionid unset to a macroRichard Guy Briggs2018-05-141-2/+2
* seccomp: Don't special case audited processes when loggingTyler Hicks2018-05-081-1/+13
* seccomp: Audit attempts to modify the actions_logged sysctlTyler Hicks2018-05-081-0/+20
* audit: allow not equal op for audit by executableOndrej Mosnáček2018-04-241-0/+2
* audit: bail before bug check if audit disabledRichard Guy Briggs2018-02-151-4/+1
* audit: deprecate the AUDIT_FILTER_ENTRY filterRichard Guy Briggs2018-02-151-10/+11
* Merge tag 'audit-pr-20171113' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2017-11-151-0/+23
|\
| * audit: filter PATH records keyed on filesystem magicRichard Guy Briggs2017-11-101-0/+23
* | audit: Record fanotify access control decisionsSteve Grubb2017-10-101-0/+6
* | Merge branch 'work.ipc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro...Linus Torvalds2017-09-151-6/+6
|\ \ | |/ |/|
| * ipc: mqueue: Replace timespec with timespec64Deepa Dinamani2017-09-041-6/+6
* | audit: update the function commentsGeliang Tang2017-09-051-9/+9
* | audit: Reduce overhead using a coarse clockMel Gorman2017-09-051-1/+1
|/
* Merge branch 'stable-4.13' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds2017-07-051-3/+9
|\
| * audit: add ambient capabilities to CAPSET and BPRM_FCAPS recordsRichard Guy Briggs2017-05-301-3/+9
* | Merge branch 'fsnotify' of git://git.kernel.org/pub/scm/linux/kernel/git/jack...Linus Torvalds2017-05-031-2/+3
|\ \ | |/ |/|
| * fsnotify: Free fsnotify_mark_connector when there is no mark attachedJan Kara2017-04-101-4/+2
| * fsnotify: Move mark list head from object into dedicated structureJan Kara2017-04-101-2/+5
* | audit: Use timespec64 to represent audit timestampsDeepa Dinamani2017-05-021-3/+3
* | audit: move audit_signal_info() into kernel/auditsc.cPaul Moore2017-03-271-12/+13
* | audit: fix auditd/kernel connection state trackingPaul Moore2017-03-211-3/+3
|/
* Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds2017-02-211-13/+27
|\
| * audit: remove unnecessary curly braces from switch/case statementsPaul Moore2017-02-141-12/+12
| * audit: log module name on init_moduleRichard Guy Briggs2017-02-131-0/+14
| * audit: Make AUDIT_ANOM_ABEND event normalizedSteve Grubb2016-12-141-1/+1
* | Merge branch 'stable-4.10' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds2016-12-141-2/+10
|\|
| * audit: add support for session ID user filterRichard Guy Briggs2016-11-291-0/+5