- d2fac0a Merge tag 'audit-pr-20211101' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 3 years, 2 months ago
- cdab10b Merge tag 'selinux-pr-20211101' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 2 months ago
- d9516f3 audit: return early if the filter rule has a lower priority by Gaosheng Cui · 3 years, 2 months ago
- 6e3ee99 audit: fix possible null-pointer dereference in audit_filter_rules by Gaosheng Cui · 3 years, 2 months ago
- 571e5c0 audit: add OPENAT2 record to list "how" info by Richard Guy Briggs · 3 years, 7 months ago
- 1c30e3a audit: add support for the openat2 syscall by Richard Guy Briggs · 3 years, 7 months ago
- 42f355e audit: replace magic audit syscall class numbers with macros by Richard Guy Briggs · 3 years, 7 months ago
- 67daf27 audit: add filtering for io_uring records by Paul Moore · 3 years, 8 months ago
- 5bd2182 audit,io_uring,io-wq: add some basic audit support to io_uring by Paul Moore · 3 years, 10 months ago
- 12c5e81 audit: prepare audit_context for use in calling contexts beyond syscalls by Paul Moore · 3 years, 10 months ago
- d680c6b audit: Convert to SPDX identifier by Cai Huoqing · 3 years, 3 months ago
- 6ddb568 audit: remove trailing spaces and tabs by Zhen Lei · 3 years, 7 months ago
- 619ed58 audit: Rename enum audit_state constants to avoid AUDIT_DISABLED redefinition by Sergey Nazarov · 3 years, 7 months ago
- 254c8b9 audit: add blank line after variable declarations by Roni Nevalainen · 3 years, 8 months ago
- e359bce Merge tag 'audit-pr-20210426' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 3 years, 8 months ago
- 4ebd765 lsm: separate security_task_getsecid() into subjective and objective variants by Paul Moore · 3 years, 10 months ago
- 5504a69 audit: further cleanup of AUDIT_FILTER_ENTRY deprecation by Richard Guy Briggs · 3 years, 10 months ago
- 7d6beb7 Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux by Linus Torvalds · 3 years, 10 months ago
- 127c8c5 audit: Make audit_filter_syscall() return void by Yang Yang · 4 years ago
- 71bc356 commoncap: handle idmapped mounts by Christian Brauner · 4 years ago
- 3d5de2d Merge tag 'audit-pr-20201214' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 4 years ago
- ba59eae7 audit: fix macros warnings by Alex Shi · 4 years, 2 months ago
- 785dc4e audit: Migrate to use SYSCALL_WORK flag by Gabriel Krisman Bertazi · 4 years, 1 month ago
- 6d91547 audit: trigger accompanying records when no rules present by Richard Guy Briggs · 4 years, 3 months ago
- fd76a74 Merge tag 'audit-pr-20200803' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 4 years, 5 months ago
- 8ac68dc revert: 1320a4052ea1 ("audit: trigger accompanying records when no rules present") by Paul Moore · 4 years, 5 months ago
- d7481b2 audit: issue CWD record to accompany LSM_AUDIT_DATA_* records by Richard Guy Briggs · 4 years, 6 months ago
- 1422403 audit: add gfp parameter to audit_log_nfcfg by Richard Guy Briggs · 4 years, 6 months ago
- 8e6cf36 audit: log nftables configuration change events by Richard Guy Briggs · 4 years, 7 months ago
- 9d44a12 audit: add subj creds to NETFILTER_CFG record to by Richard Guy Briggs · 4 years, 7 months ago
- db9ff6e audit: make symbol 'audit_nfcfgs' static by Zheng Bin · 4 years, 8 months ago
- a45d885 netfilter: add audit table unregister actions by Richard Guy Briggs · 4 years, 8 months ago
- c4dad0a audit: tidy and extend netfilter_cfg x_tables by Richard Guy Briggs · 4 years, 8 months ago
- 1320a40 audit: trigger accompanying records when no rules present by Richard Guy Briggs · 4 years, 10 months ago
- 0223fad audit: enforce op for string fields by Richard Guy Briggs · 6 years ago
- bf36123 audit: add saddr_fam filter field by Richard Guy Briggs · 6 years ago
- b48345a audit: deliver signal_info regarless of syscall by Richard Guy Briggs · 6 years ago
- d27fb65 Merge branch 'work.dcache' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 6 years ago
- 795d673 audit_compare_dname_path(): switch to const struct qstr * by Al Viro · 6 years ago
- 7e8eda7 ntp: Audit NTP parameters adjustment by Ondrej Mosnacek · 6 years ago
- 2d87a06 timekeeping: Audit clock adjustments by Ondrej Mosnacek · 6 years ago
- 699c186 audit: purge unnecessary list_empty calls by Richard Guy Briggs · 6 years ago
- 16add41 syscall_get_arch: add "struct task_struct *" argument by Dmitry V. Levin · 6 years ago
- 2efa48f audit: Make audit_log_cap and audit_copy_inode static by YueHaibing · 6 years ago
- 95e0b46 audit: fix a memleak caused by auditing load module by Li RongQing · 6 years ago
- 5f3d544 audit: remove audit_context when CONFIG_ AUDIT and not AUDITSYSCALL by Richard Guy Briggs · 6 years ago
- 90462a5 audit: remove unused actx param from audit_rule_match by Richard Guy Briggs · 6 years ago
- 57d4657 audit: ignore fcaps on umount by Richard Guy Briggs · 6 years ago
- a252f56 audit: more filter PATH records keyed on filesystem magic by Richard Guy Briggs · 6 years ago
- 2fec30e audit: add support for fcaps v3 by Richard Guy Briggs · 6 years ago
- 4b7d248 audit: move loginuid and sessionid from CONFIG_AUDITSYSCALL to CONFIG_AUDIT by Richard Guy Briggs · 6 years ago
- 9e36a5d audit: hand taken context to audit_kill_trees for syscall logging by Richard Guy Briggs · 6 years ago
- 2a1fe21 audit: use current whenever possible by Paul Moore · 6 years ago
- d0a3f18 audit: minimize our use of audit_log_format() by Paul Moore · 6 years ago
- c8fc5d4 audit: remove WATCH and TREE config options by Richard Guy Briggs · 6 years ago
- ea956d8 audit: print empty EXECVE args by Richard Guy Briggs · 6 years ago
- 8c32685 Merge tag 'audit-pr-20180814' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 6 years ago
- b305f7e audit: fix potential null dereference 'context->module.name' by Yi Wang · 6 years ago
- 290e44b audit: use ktime_get_coarse_real_ts64() for timestamps by Paul Moore · 6 years ago
- c72051d audit: use ktime_get_coarse_ts64() for time access by Arnd Bergmann · 7 years ago
- af85d17 audit: Fix extended comparison of GID/EGID by Ondrej Mosnáček · 7 years ago
- d87de4a audit: tie ANOM_ABEND records to syscall by Richard Guy Briggs · 7 years ago
- 9b8753f audit: tie SECCOMP records to syscall by Richard Guy Briggs · 7 years ago
- 5b71388 audit: Fix wrong task in comparison of session ID by Ondrej Mosnáček · 7 years ago
- 38f8059 audit: normalize loginuid read access by Richard Guy Briggs · 7 years ago
- 8982a1f audit: use new audit_context access funciton for seccomp_actions_logged by Richard Guy Briggs · 7 years ago
- c0b0ae8 audit: use inline function to set audit context by Richard Guy Briggs · 7 years ago
- cdfb6b3 audit: use inline function to get audit context by Richard Guy Briggs · 7 years ago
- f0b7521 audit: convert sessionid unset to a macro by Richard Guy Briggs · 7 years ago
- 326bee0 seccomp: Don't special case audited processes when logging by Tyler Hicks · 7 years ago
- ea6eca7 seccomp: Audit attempts to modify the actions_logged sysctl by Tyler Hicks · 7 years ago
- 23bcc48 audit: allow not equal op for audit by executable by Ondrej Mosnáček · 7 years ago
- 94d14e3 audit: bail before bug check if audit disabled by Richard Guy Briggs · 7 years ago
- 5260ecc audit: deprecate the AUDIT_FILTER_ENTRY filter by Richard Guy Briggs · 7 years ago
- f9bab26 Merge tag 'audit-pr-20171113' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 7 years ago
- 42d5e37 audit: filter PATH records keyed on filesystem magic by Richard Guy Briggs · 7 years ago
- de8cd83 audit: Record fanotify access control decisions by Steve Grubb · 7 years ago
- cc73fee Merge branch 'work.ipc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 7 years ago
- 196a508 audit: update the function comments by Geliang Tang · 7 years ago
- e832bf4 audit: Reduce overhead using a coarse clock by Mel Gorman · 7 years ago
- b904772 ipc: mqueue: Replace timespec with timespec64 by Deepa Dinamani · 7 years ago
- 7391786 Merge branch 'stable-4.13' of git://git.infradead.org/users/pcmoore/audit by Linus Torvalds · 7 years ago
- 7786f6b audit: add ambient capabilities to CAPSET and BPRM_FCAPS records by Richard Guy Briggs · 8 years ago
- 5133cd7 Merge branch 'fsnotify' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs by Linus Torvalds · 8 years ago
- 2115bb2 audit: Use timespec64 to represent audit timestamps by Deepa Dinamani · 8 years ago
- 08991e8 fsnotify: Free fsnotify_mark_connector when there is no mark attached by Jan Kara · 8 years ago
- 9dd813c fsnotify: Move mark list head from object into dedicated structure by Jan Kara · 8 years ago
- ab6434a audit: move audit_signal_info() into kernel/auditsc.c by Paul Moore · 8 years ago
- 5b52330 audit: fix auditd/kernel connection state tracking by Paul Moore · 8 years ago
- b8989bc Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/audit by Linus Torvalds · 8 years ago
- fe8e52b9 audit: remove unnecessary curly braces from switch/case statements by Paul Moore · 8 years ago
- ca86cad audit: log module name on init_module by Richard Guy Briggs · 8 years ago
- dcdaa2f Merge branch 'stable-4.10' of git://git.infradead.org/users/pcmoore/audit by Linus Torvalds · 8 years ago
- 89670af audit: Make AUDIT_ANOM_ABEND event normalized by Steve Grubb · 8 years ago
- 8fae477 audit: add support for session ID user filter by Richard Guy Briggs · 8 years ago
- 833fc48 audit: skip sessionid sentinel value when auto-incrementing by Richard Guy Briggs · 8 years ago
- 8443075 audit: tame initialization warning len_abuf in audit_log_execve_info by Richard Guy Briggs · 8 years ago
- 3cd013a Merge branch 'stable-4.9' of git://git.infradead.org/users/pcmoore/audit by Linus Torvalds · 8 years ago
- fa2bea2 audit: consistently record PIDs with task_tgid_nr() by Paul Moore · 8 years ago
- 797cee9 Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/audit by Linus Torvalds · 8 years ago