2023-11-01 3:28 Re: Linux Audit Mail List 3+ messages
2023-10-24 18:53 Audit status update
2023-10-23 17:37 Re: Couldn't get audit messages for 'listen' on kernel 4.19.0-6-686-pae 5+ messages
2023-10-17 14:21 netlink ACK handling in audit_set_pid()
2023-10-16 6:45 Re: Need help with af_unix audisd plugin
2023-10-12 10:43 Re: [linux-audit/audit-userspace] Aureport on stream of data (Issue #324)
2023-10-08 4:46 Re: Sycall Rules vs Watch Rules 13+ messages
2023-09-20 18:11 RE: [EXT] Re: 128 Character limit on proctitle field? 4+ messages
2023-09-19 22:40 Re: Increasing audit netlink buffer size 2+ messages
2023-08-31 14:38 Re: [pcmoore-audit:main 1/1] README.orig: warning: ignored by one of the .gitignore files 4+ messages
2023-08-31 2:27 Re: [nf PATCH 2/2] netfilter: nf_tables: Audit log rule reset 10+ messages
2023-08-26 14:47 Re: [PATCH] audit: add task history record 29+ messages
2023-08-08 14:38 Re: [PATCH v2] TaskTracker : Simplified thread information tracker. 11+ messages
2023-08-08 14:25 [RFC] Future audit changes
2023-08-06 21:52 audit-3.1.2 released
2023-07-25 20:59 Re: Cannot disable kernel's audit system via auditctl 5+ messages
2023-06-07 2:31 Re: Comprehensive Documentation on the Linux Audit Framework 5+ messages
2023-05-26 0:41 Re: No more report of quantity of rules successfully loaded 4+ messages
2023-05-24 19:12 Re: Auditd doesn't receive syscalls after installation for the current shell. 4+ messages
2023-05-24 10:48 Re: Can AUDIT_LIST_RULES causes kthreadd-spam? 13+ messages
2023-05-17 23:17 Re: What STIG audit rule picks up type=SOFTWARE_UPDATE events? 6+ messages
2023-05-10 16:11 Re: sending audit logs only to audit.log via rsyslog 4+ messages
2023-05-04 14:51 The directory removing loses a fraction of path.
2023-05-02 13:27 Re: "service auditd start" fails inside a container 6+ messages
2023-04-27 19:44 audit-3.1.1 released
2023-04-17 21:31 Re: [RFC PATCH v9 05/16] ipe: add userspace interface 74+ messages
2023-04-17 8:35 [ANNOUNCE] [CFP] Linux Security Summit Europe (LSS-EU)
2023-04-14 14:50 Re: small patch for issue with rules that have been (incorrecly) copied from Windows 4+ messages
2023-03-20 15:50 Re: Help with setting up Auditd kernel repository 4+ messages
2023-03-20 13:04 RE: run script after auditd rotates logs 3+ messages
2023-03-17 20:37 Re: audit userspace problems with io_uring async ops 7+ messages
2023-03-16 18:58 Re: Clarification Around File System Auditing 7+ messages
2023-03-10 20:54 Re: Auditing nftables changes 10+ messages
2023-03-09 6:16 Re: Key based rate limiter (audit_set_rate_limit) 15+ messages
2023-03-09 2:07 Re: How to define audit rule for one bit *not* set for a syscall argument? 3+ messages
2023-03-03 17:14 Re: [PATCH v38 02/39] LSM: Add an LSM identifier for external use 68+ messages
2023-02-22 20:59 Re: [GIT PULL] Audit patches for v6.3 2+ messages
2023-02-14 19:26 Re: [PATCH] tests/filter_exclude: euid filtering now possible in exclude filter 2+ messages
2023-02-10 22:59 Re: [PATCH v2] io_uring,audit: don't log IORING_OP_MADVISE 13+ messages
2023-02-09 16:40 audit-3.1 released
2023-02-09 9:07 Re: [PATCH v7 0/3] fanotify: Allow user space to pass back additional audit info 14+ messages
2023-02-07 18:56 Re: [PATCH] audit: update the mailing list in MAINTAINERS 2+ messages
2023-02-07 15:31 Re: Upstream kernel development and the linux-audit mailing list 3+ messages
2023-02-02 5:25 Re: Re: audit library license 3+ messages
2023-01-31 15:53 Re: audit library license 2+ messages
2023-01-30 16:51 Re: Setting priority to auditd rule files 2+ messages
2023-01-29 23:37 Re: [PATCH v1 2/2] io_uring,audit: do not log IORING_OP_*GETXATTR 29+ messages
2023-01-29 11:50 Re: [RFC PATCH v2 11/31] kvx: Add atomic/locking headers 63+ messages
2023-01-27 20:17 Re: [PATCH v6 3/3] fanotify, audit: Allow audit to use the full permission event response 13+ messages
2023-01-20 22:24 [ANNOUNCE] Linux Security Summit North Americ (LSS-NA) CfP
2023-01-18 8:48 Re: [RFC PATCH 02/25] kvx: Add ELF-related definitions 13+ messages
2023-01-17 19:33 Re: [PATCH v5 2/3] fanotify: define struct members to hold response decision context 20+ messages
2023-01-16 18:28 Re: Difference between BITMAP_EXECUTABLE_PATH and BITMAP_EXCLUDE_EXTEND flags 2+ messages
2023-01-14 2:15 Re: audit rules to help watch for potential threat? 2+ messages
2023-01-10 16:55 Re: [PATCH v3 1/2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD 12+ messages
2023-01-10 15:15 Re: Identify whether the kernel version supports Path based exclusion 3+ messages
2023-01-10 4:38 Re: New bug in Audit 10+ messages
2023-01-09 15:51 Re: A question on monitoring time or time management changes in the kernel and the adjtimex system call 3+ messages
2023-01-03 18:12 Re: [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD
2023-01-03 0:33 Re: [PATCH v2] bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD 18+ messages
2022-12-23 18:03 Re: [PATCH] bpf: restore the ebpf audit UNLOAD id field 12+ messages
2022-12-21 23:49 Re: BPF audit logs 8+ messages
2022-12-19 22:24 Re: [PATCH 1/2] audit: introduce a struct to represent an audit timestamp 4+ messages
2022-12-19 22:20 Re: [PATCH RESEND 2/2] selinux: provide matching audit timestamp in the AVC trace event 4+ messages
2022-12-13 18:13 Re: [GIT PULL] Audit patches for v6.2 2+ messages
2022-11-19 2:16 [PATCH AUTOSEL 4.9 2/4] audit: fix undefined behavior in bit shift for AUDIT_BIT
2022-11-19 2:16 [PATCH AUTOSEL 4.14 2/6] audit: fix undefined behavior in bit shift for AUDIT_BIT
2022-11-19 2:16 [PATCH AUTOSEL 4.19 2/8] audit: fix undefined behavior in bit shift for AUDIT_BIT
2022-11-19 2:15 [PATCH AUTOSEL 5.4 03/11] audit: fix undefined behavior in bit shift for AUDIT_BIT
2022-11-19 2:14 [PATCH AUTOSEL 5.10 04/18] audit: fix undefined behavior in bit shift for AUDIT_BIT
2022-11-19 2:13 [PATCH AUTOSEL 5.15 04/27] audit: fix undefined behavior in bit shift for AUDIT_BIT
2022-11-19 2:10 [PATCH AUTOSEL 6.0 06/44] audit: fix undefined behavior in bit shift for AUDIT_BIT
2022-11-09 23:34 Re: [PATCH v1 4/8] LSM: Maintain a table of LSM attribute data
2022-11-08 20:48 Re: [GIT PULL] Audit fixes for v6.1 (#1) 2+ messages
2022-11-05 4:25 Re: [PATCH] audit: fix undefined behavior in bit shift for AUDIT_BIT 5+ messages
2022-10-31 15:47 Re: LSM stacking in next for 6.1? 74+ messages
2022-10-28 14:13 [PATCH] Properly pass struct timeval.tv_sec to snprintf under -D_TIME_BITS=64
2022-10-17 18:26 Re: [PATCH v2] audit: unify audit_filter_{uring(), inode_name(), syscall()} 20+ messages
2022-10-07 18:22 Re: IORING_OP_SENDMSG_ZC should enable auditing just like IORING_OP_SENDMSG 2+ messages
2022-10-04 18:18 Re: [GIT PULL] Audit patches for v6.1 2+ messages
2022-09-19 23:54 [PATCH v2 RFC] LSM: lsm_self_attr syscall for LSM self attributes 4+ messages
2022-09-16 21:03 Re: Query regarding the lib audit-userspace 4+ messages
2022-09-09 18:50 Re: [PATCH v4 3/4] fanotify,audit: Allow audit to use the full permission event response 44+ messages
2022-09-07 15:35 Re: [PATCH -next] audit: remove selinux_audit_rule_update() declaration 2+ messages
2022-08-31 19:54 Re: [RFC PATCH 2/2] fs/xattr: wire up syscalls 3+ messages
2022-08-31 1:04 Re: [PATCH] audit: remove obvious unnecessary header files 7+ messages
2022-08-29 23:48 Re: [PATCH] audit: use time_after to compare time 2+ messages
2022-08-29 22:18 audit-3.0.9 released
2022-08-27 23:07 Re: [GIT PULL] Audit fixes for v6.0 (#2) 2+ messages
2022-08-26 21:20 Re: [PATCH ghak138 v2 3/4] audit: free audit_proctitle only on task exit 9+ messages
2022-08-25 21:07 Re: [PATCH] tests/io_uring: ensure that tne io_uring::enter_ring_fd is imported 4+ messages
2022-08-25 16:23 Re: [PATCH ghak138] audit: move audit_return_fixup before the filters 3+ messages
2022-08-24 3:57 Re: [PATCH next] audit: printk before dropping logs in audit_log_end 5+ messages
2022-08-24 2:45 Re: [GIT PULL] Audit fixes for v6.0 (#1) 2+ messages
2022-08-23 13:09 Re: data-race in audit_log_start / audit_receive 6+ messages
2022-08-23 2:06 Re: [PATCH next] audit: fix potential double free on error path from fsnotify_add_inode_mark 8+ messages
2022-08-16 2:48 Re: [PATCH] kernel: fix repeated words in comments 2+ messages
2022-08-09 15:57 Re: [RFC PATCH v8 07/17] ipe: add auditing support 26+ messages
2022-08-04 14:44 Re: [PATCH v2] audit, io_uring, io-wq: Fix memory leak in io_sq_thread() and io_wqe_worker() 10+ messages
2022-08-02 22:29 Re: [GIT PULL] Audit patches for v6.0 2+ messages
2022-07-14 21:38 Re: Excluding a script / process and its descendants from audit 3+ messages
2022-07-12 21:58 Re: [PATCH v37 00/33] LSM: Module stacking for AppArmor 39+ messages
2022-07-12 19:12 Re: Trying to understand audisp-remote network behavior 8+ messages
2022-06-23 7:09 Re: [PATCH v36 18/33] LSM: Use lsmcontext in security_dentry_init_security 42+ messages
2022-06-16 22:57 Re: [GIT PULL] Audit fixes for v5.19 (#1) 2+ messages
2022-06-15 23:33 Re: [PATCH] audit: free module name 2+ messages
2022-06-13 18:13 Re: [PATCH -next] audit: make is_audit_feature_set() static 2+ messages
2022-06-08 8:43 Re: [PATCH 1/2] audit: remove redundant data_len check 6+ messages
2022-06-07 16:35 Re: Be careful with rules 5+ messages
2022-05-23 14:16 Linux v5.19 and audit
2022-05-19 22:08 Re: [EXTERNAL] Re: Help setxattr, lsetxattr, fsetxattr, removexattr, lremovexattr 6+ messages
2022-05-19 9:55 Re: [PATCH v3 2/3] fanotify: define struct members to hold response decision context 16+ messages
2022-05-19 0:35 Re: [GIT PULL] Audit fixes for v5.18 (#1) 2+ messages
2022-05-18 17:06 Re: What does "---" in audit.log timestamp / event-id field mean? 4+ messages
2022-05-18 15:50 [ANNOUNCE][CFP] Linux Security Summit Europe 2022
2022-05-17 21:34 Re: [PATCH 1/1] audit,io_uring,io-wq: call __audit_uring_exit for dummy contexts 4+ messages
2022-05-16 20:53 Re: [PATCH v2 2/3] fanotify: define struct members to hold response decision context 21+ messages
2022-05-15 23:30 Re: [PATCH 4/5] audit: remove redundant data_len check 11+ messages
2022-05-04 5:22 Re: [PATCH 2/2] audit: add filterkey to special audit messages 9+ messages
2022-04-27 20:55 Re: [PATCH v35 23/29] Audit: Create audit_stamp structure 64+ messages
2022-04-27 0:44 Re: [PATCH] signal: improve the signal test robustness 2+ messages
2022-04-17 9:33 [LSM] 0d4df6ae86: BUG:KASAN:stack-out-of-bounds_in_netlbl_unlabel_defconf 34+ messages
2022-04-15 21:44 Re: [PATCH v34 00/29] LSM: Module stacking for AppArmor 31+ messages
2022-04-07 2:36 Re: [PATCH] audit: do a quick exit when syscall number is invalid 20+ messages
2022-04-04 13:12 Re: [PATCH v2] audit: do a quick exit when syscall number is less than 0 2+ messages
2022-03-29 21:55 audit-3.0.8 released
2022-03-28 15:19 Re: [PATCH v2] audit: do a quick exit when syscall number is invalid 2+ messages
2022-03-22 3:56 Re: [GIT PULL] Audit patches for v5.18 2+ messages
2022-03-19 3:39 [linux-next:master] BUILD REGRESSION 6d72dda014a4753974eb08950089ddf71fec4f60
2022-03-18 22:31 Re: [ANNOUNCE][CFP] Linux Security Summit North America 2022 2+ messages
2022-03-16 1:08 Re: [PATCH v33 27/29] Audit: Add record for multiple object security contexts 41+ messages
2022-03-11 21:03 Re: [PATCH 03/17] io_uring: add infra and support for IORING_OP_URING_CMD 3+ messages
2022-03-09 21:49 Re: Newer versions of audit missing information? 3+ messages
2022-03-04 19:14 Re: [PATCH v32 03/28] LSM: Add the lsmblob data structure. 41+ messages
2022-03-03 22:23 Re: Bug in Queue Statistics? 3+ messages
2022-03-02 17:11 Re: Alert when auditd is stopped 2+ messages
2022-02-28 15:37 Re: audit user space build problems 3+ messages
2022-02-23 22:00 Re: [PATCH -next] audit: only print records that will be dropped via printk() 2+ messages
2022-02-23 20:19 Re: Removing Audit-libs, Python3-audit 3+ messages
2022-02-23 9:35 [PATCH -next, v2] audit: only print records that will be dropped via printk()
2022-02-22 19:02 Re: [PATCH v6] audit: log AUDIT_TIME_* records only from rules 3+ messages
2022-02-17 22:55 Re: [PATCH v5] audit: log AUDIT_TIME_* records only from rules 3+ messages
2022-02-15 23:06 Re: [PATCH v4] audit: log AUDIT_TIME_* records only from rules 2+ messages
2022-02-11 15:25 Re: [PATCH v3] audit: log AUDIT_TIME_* records only from rules 9+ messages
2022-02-10 14:03 Re: [GIT PULL] Audit fixes for v5.17 (#2) 2+ messages
2022-02-09 23:45 Re: [PATCH] audit: don't deref the syscall args when checking the openat2 open_how::flags 2+ messages
2022-02-09 23:44 Re: [PATCH v1] audit: fix illegal pointer dereference for openat2 2+ messages
2022-02-09 22:31 Re: [PATCH v4 2/3] audit: add support for the openat2 syscall 26+ messages
2022-02-09 1:43 Re: Aw: Re: How to configure auditd to register like internal bash commands? 7+ messages
2022-02-04 13:50 [PATCH v4 5/5] taskstats: Use task_is_in_init_pid_ns() 6+ messages
2022-02-03 18:09 Re: [PATCH 1/1] Smack:- Fix the issue of wrong info printed in ptrace error logs 14+ messages
2022-02-01 20:46 Re: [GIT PULL] Audit fixes for v5.17 (#1) 2+ messages
2022-01-25 21:47 Re: [PATCH v2] audit: log AUDIT_TIME_* records only from rules 4+ messages
2022-01-25 20:30 Re: Maximum Value for q_depth 10+ messages
2022-01-25 18:26 Re: [PATCH v2] audit: improve audit queue handling when "audit=1" on cmdline 6+ messages
2022-01-24 9:29 Re: [PATCH v2 0/7] pid: Introduce helper task_is_in_root_ns() 24+ messages
2022-01-23 20:29 audit-3.0.7 released
2022-01-20 23:07 Re: [RFC PATCH v1] audit: log AUDIT_TIME_* records only from rules 14+ messages
2022-01-19 16:10 Re: [RFC PATCH] audit: improve audit queue handling when "audit=1" on cmdline 3+ messages
2022-01-18 2:46 [PATCH AUTOSEL 4.19 33/59] audit: ensure userspace is penalized the same as the kernel when under pressure
2022-01-18 2:44 [PATCH AUTOSEL 5.4 43/73] audit: ensure userspace is penalized the same as the kernel when under pressure
2022-01-18 2:39 [PATCH AUTOSEL 5.10 071/116] audit: ensure userspace is penalized the same as the kernel when under pressure
2022-01-18 2:30 [PATCH AUTOSEL 5.15 121/188] audit: ensure userspace is penalized the same as the kernel when under pressure
2022-01-18 2:18 [PATCH AUTOSEL 5.16 142/217] audit: ensure userspace is penalized the same as the kernel when under pressure
2022-01-14 22:35 Re: Flush the hold queue fall into an infinite loop. 5+ messages
2022-01-11 21:24 Re: [GIT PULL] Audit patches for v5.17 2+ messages
2022-01-11 15:42 Re: Mapping of Audit rule to Record Type Generated + chmod log query 4+ messages
2022-01-04 22:43 initial io_uring test for audit-testsuite
2021-12-29 1:20 Re: [PATCH -next 1/1] audit: ignore userspace log when backlog limit exceeded and backlog_wait_time is 0 3+ messages
2021-12-20 21:20 Re: [PATCH -next, v3 2/2] audit: replace zero-length array with flexible-array member 4+ messages
2021-12-20 21:07 Re: audit: correct the AUDIT_DM_CTRL and AUDIT_DM_EVENT numbering 6+ messages
2021-12-17 0:03 Re: [GIT PULL] Audit fixes for v5.16 (#1) 2+ messages
2021-12-16 23:16 Fwd: [PATCH -next, v3 2/2] audit: replace zero-length array with flexible-array member 2+ messages
2021-12-15 18:28 Re: [PATCH] audit: improve robustness of the audit queue handling 5+ messages
2021-12-15 18:15 Re: [PATCH] audit: ensure userspace is penalized the same as the kernel when under pressure 4+ messages
2021-12-15 9:14 Re: [PATCH v31 13/28] LSM: Use lsmblob in security_cred_getsecid 35+ messages
2021-12-15 2:56 Re: [PATCH -next] audit: use struct_size() helper in kmalloc() 8+ messages
2021-12-06 10:57 RE: [RFC][PATCH] device mapper: Add builtin function dm_get_status() 63+ messages
2021-12-06 7:42 Re: [PATCH] audit: accelerate audit rule filter 3+ messages
2021-12-06 7:13 Re: [PATCH v1 1/7] pid: Introduce helper task_is_in_root_ns() 11+ messages
2021-12-06 2:45 Re: [PATCH v30 26/28] Audit: Add record for multiple object security contexts 40+ messages
2021-12-01 19:39 Re: [PATCH] audit: accelerate audit rule filter 4+ messages
2021-11-29 20:05 Re: LSM stacking v30 Audit changes 3+ messages
2021-11-04 21:46 Re: [PATCH RFC] integrity: disassociate ima_filter_rule from security_audit_rule 2+ messages
2021-11-04 21:41 Re: [PATCH v1] add clock_adjtime to certification rulesets 3+ messages
2021-11-04 18:57 Re: Disassociating ima_filter_rule* from security_audit_rule* 2+ messages
2021-11-04 14:32 Re: [PATCH v2 RESEND] powerpc/audit: Convert powerpc to AUDIT_ARCH_COMPAT_GENERIC 14+ messages
2021-11-02 16:32 Re: [PATCH v3 2/7] add support for the uring filter list 13+ messages
2021-11-02 4:21 Re: [GIT PULL] Audit patches for v5.16 2+ messages
2021-10-28 21:15 Re: [PATCH v1] add filesystem filter list to auditctl usage 2+ messages
2021-10-28 21:14 Re: [PATCH v1] auditctl: check for a watch before adding perm 2+ messages
2021-10-28 21:13 Re: [PATCH v1] remove unused fn audit_add_dir and decl audit_rule_syscall_data 2+ messages
2021-10-28 20:07 Re: [RFC PATCH v2 0/9] Add LSM access controls and auditing to io_uring 41+ messages
2021-10-22 7:18 Re: why no LOGOUT event record on some OSes 10+ messages
2021-10-20 16:16 Re: [GIT PULL] Audit fixes for v5.15 (#1) 2+ messages
2021-10-19 14:53 Re: [PATCH -next, v3 2/2] audit: return early if the rule has a lower priority 7+ messages
2021-10-16 8:02 Re: [PATCH -next, v2 2/2] audit: return early if the rule has a lower priority 7+ messages
2021-10-13 9:44 Re: [PATCH -next] audit: return early if the rule has a lower priority 3+ messages
2021-10-05 23:24 Audit container ID patchset v11 comments
2021-10-01 17:21 audit-3.0.6 released
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).