linux-stable.git/kernel/auditsc.c, branch linux-2.6.19.y Linux kernel stable tree [PATCH] name_count array overrun 2006-10-04T12:31:21+00:00 Steve Grubb sgrubb@redhat.com 2006-09-28T18:31:32+00:00 ac9910ce017ff5f86f3a25e969b2c4f5d6ac438f Hi, This patch removes the rdev logging from the previous patch The below patch closes an unbounded use of name_count. This can lead to oopses in some new file systems. Signed-off-by: Steve Grubb <sgrubb@redhat.com> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> 
Hi,

This patch removes the rdev logging from the previous patch

The below patch closes an unbounded use of name_count. This can lead to oopses
in some new file systems.

Signed-off-by: Steve Grubb <sgrubb@redhat.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
[PATCH] PPID filtering fix 2006-10-04T12:31:19+00:00 Alexander Viro aviro@redhat.com 2006-09-29T04:08:50+00:00 419c58f11fb732cc8bd1335fa43e0decb34e0be3 On Thu, Sep 28, 2006 at 04:03:06PM -0400, Eric Paris wrote: > After some looking I did not see a way to get into audit_log_exit > without having set the ppid. So I am dropping the set from there and > only doing it at the beginning. > > Please comment/ack/nak as soon as possible. Ehh... That's one hell of an overhead to be had ;-/ Let's be lazy. Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> 
On Thu, Sep 28, 2006 at 04:03:06PM -0400, Eric Paris wrote:
> After some looking I did not see a way to get into audit_log_exit
> without having set the ppid.  So I am dropping the set from there and
> only doing it at the beginning.
>
> Please comment/ack/nak as soon as possible.

Ehh...  That's one hell of an overhead to be had ;-/  Let's be lazy.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
[PATCH] audit/accounting: tty locking 2006-09-29T16:18:25+00:00 Alan Cox alan@lxorguk.ukuu.org.uk 2006-09-29T09:01:41+00:00 eb84a20e9e6b98dcb33023ad22241d79107a08a7 Add tty locking around the audit and accounting code. The whole current->signal-> locking is all deeply strange but it's for someone else to sort out. Add rather than replace the lock for acct.c Signed-off-by: Alan Cox <alan@redhat.com> Acked-by: Arjan van de Ven <arjan@linux.intel.com> Cc: Al Viro <viro@zeniv.linux.org.uk> Cc: Oleg Nesterov <oleg@tv-sign.ru> Signed-off-by: Andrew Morton <akpm@osdl.org> Signed-off-by: Linus Torvalds <torvalds@osdl.org> 
Add tty locking around the audit and accounting code.

The whole current->signal-> locking is all deeply strange but it's for
someone else to sort out.  Add rather than replace the lock for acct.c

Signed-off-by: Alan Cox <alan@redhat.com>
Acked-by: Arjan van de Ven <arjan@linux.intel.com>
Cc: Al Viro <viro@zeniv.linux.org.uk>
Cc: Oleg Nesterov <oleg@tv-sign.ru>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
[PATCH] selinux: rename selinux_ctxid_to_string 2006-09-26T15:48:52+00:00 Stephen Smalley sds@tycho.nsa.gov 2006-09-26T06:31:57+00:00 1a70cd40cb291c25b67ec0da715a49d76719329d Rename selinux_ctxid_to_string to selinux_sid_to_string to be consistent with other interfaces. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> Acked-by: James Morris <jmorris@namei.org> Signed-off-by: Andrew Morton <akpm@osdl.org> Signed-off-by: Linus Torvalds <torvalds@osdl.org> 
Rename selinux_ctxid_to_string to selinux_sid_to_string to be
consistent with other interfaces.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Acked-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
[PATCH] selinux: eliminate selinux_task_ctxid 2006-09-26T15:48:52+00:00 Stephen Smalley sds@tycho.nsa.gov 2006-09-26T06:31:56+00:00 62bac0185ad3dfef11d9602980445c54d45199c6 Eliminate selinux_task_ctxid since it duplicates selinux_task_get_sid. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> Acked-by: James Morris <jmorris@namei.org> Signed-off-by: Andrew Morton <akpm@osdl.org> Signed-off-by: Linus Torvalds <torvalds@osdl.org> 
Eliminate selinux_task_ctxid since it duplicates selinux_task_get_sid.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Acked-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
[PATCH] audit: AUDIT_PERM support 2006-09-11T17:32:30+00:00 Al Viro viro@zeniv.linux.org.uk 2006-08-31T23:26:40+00:00 55669bfa141b488be865341ed12e188967d11308 add support for AUDIT_PERM predicate Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> 
add support for AUDIT_PERM predicate

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
[PATCH] take filling ->pid, etc. out of audit_get_context() 2006-08-03T14:59:51+00:00 Al Viro viro@zeniv.linux.org.uk 2006-07-16T10:43:48+00:00 3f2792ffbd88dc1cd41d226674cc428914981e98 move that stuff downstream and into the only branch where it'll be used. Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> 
move that stuff downstream and into the only branch where it'll be
used.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
[PATCH] don't bother with aux entires for dummy context 2006-08-03T14:59:42+00:00 Al Viro viro@zeniv.linux.org.uk 2006-07-16T10:38:45+00:00 5ac3a9c26c1cc4861d9cdd8b293fecbfcdc81afe Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> 
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
[PATCH] mark context of syscall entered with no rules as dummy 2006-08-03T14:59:26+00:00 Al Viro viro@zeniv.linux.org.uk 2006-08-03T14:59:26+00:00 d51374adf5f2f88155a072d3d801104e3c0c3d7f Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> 
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
[PATCH] introduce audit rules counter 2006-08-03T14:55:18+00:00 Al Viro viro@zeniv.linux.org.uk 2006-07-10T12:29:24+00:00 471a5c7c839114cc8b55876203aeb2817c33e3c5 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> 
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>