linux-stable.git/include/linux/audit.h, branch linux-2.6.19.y

[PATCH] message types updated

2006-10-04T12:31:24+00:00

Hi,

This patch adds a new type for 3rd party module use and cleans up a deprecated
message type.

Signed-off-by: Steve Grubb 
Signed-off-by: Al Viro

[NetLabel]: audit fixups due to delayed feedback

2006-09-30T00:05:05+00:00

Fix some issues Steve Grubb had with the way NetLabel was using the audit
subsystem.  This should make NetLabel more consistent with other kernel
generated audit messages specifying configuration changes.

Signed-off-by: Paul Moore 
Acked-by: Steve Grubb 
Signed-off-by: David S. Miller

[NetLabel]: add audit support for configuration changes

2006-09-29T01:03:09+00:00

This patch adds audit support to NetLabel, including six new audit message
types shown below.

 #define AUDIT_MAC_UNLBL_ACCEPT 1406
 #define AUDIT_MAC_UNLBL_DENY   1407
 #define AUDIT_MAC_CIPSOV4_ADD  1408
 #define AUDIT_MAC_CIPSOV4_DEL  1409
 #define AUDIT_MAC_MAP_ADD      1410
 #define AUDIT_MAC_MAP_DEL      1411

Signed-off-by: Paul Moore 
Acked-by: James Morris 
Signed-off-by: David S. Miller

[PATCH] audit: AUDIT_PERM support

2006-09-11T17:32:30+00:00

add support for AUDIT_PERM predicate

Signed-off-by: Al Viro

[PATCH] audit: more syscall classes added

2006-09-11T17:32:27+00:00

Signed-off-by: Al Viro

[PATCH] don't bother with aux entires for dummy context

2006-08-03T14:59:42+00:00

Signed-off-by: Al Viro

[PATCH] mark context of syscall entered with no rules as dummy

2006-08-03T14:59:26+00:00

Signed-off-by: Al Viro

[PATCH] introduce audit rules counter

2006-08-03T14:55:18+00:00

Signed-off-by: Al Viro

[PATCH] fix missed create event for directory audit

2006-08-03T14:50:30+00:00

When an object is created via a symlink into an audited directory, audit misses
the event due to not having collected the inode data for the directory.  Modify
__audit_inode_child() to copy the parent inode data if a parent wasn't found in
audit_names[].

Signed-off-by: Amy Griffis 
Signed-off-by: Al Viro

[PATCH] fix faulty inode data collection for open() with O_CREAT

2006-08-03T14:50:21+00:00

When the specified path is an existing file or when it is a symlink, audit
collects the wrong inode number, which causes it to miss the open() event.
Adding a second hook to the open() path fixes this.

Also add audit_copy_inode() to consolidate some code.

Signed-off-by: Amy Griffis 
Signed-off-by: Al Viro