9:56 a.m.
Hello,
This patch adds more messages types to the audit subsystem so that audit
analysis is quicker, intuitive, and more useful.
Signed-off-by: Steve Grubb <sgrubb(a)redhat.com>
10:38 a.m.
On Wed, 2005-05-11 at 10:56 -0400, Steve Grubb wrote:
Hello,
This patch adds more messages types to the audit subsystem so that audit
analysis is quicker, intuitive, and more useful.
Thanks. I've massaged it a bit to make it apply to the RPM, and audit.35
is building.
Signed-off-by: Steve Grubb <sgrubb(a)redhat.com>
No need to sign off except for patches which are destined for the git
tree and hence upstream.
--
dwmw2
10:47 a.m.
On Wednesday 11 May 2005 11:38, David Woodhouse wrote:
audit.35 is building.
Thanks. I'll try to get user space tools updated this afternoon.
No need to sign off except for patches which are destined for the
git
tree and hence upstream.
This isn't going upstream at some point?
-Steve
11:27 a.m.
New subject: audit.35 kernel... Re: [PATCH] add message types
On Wed, 2005-05-11 at 16:38 +0100, David Woodhouse wrote:
> This patch adds more messages types to the audit subsystem so
that audit
> analysis is quicker, intuitive, and more useful.
Thanks. I've massaged it a bit to make it apply to the RPM, and audit.35
is building.
... now uploaded.
--
dwmw2
12:57 p.m.
New subject: audit.35 kernel... Re: [PATCH] add message types
On Wed, 11 May 2005 17:27:24 BST, David Woodhouse said:
On Wed, 2005-05-11 at 16:38 +0100, David Woodhouse wrote:
> > This patch adds more messages types to the audit subsystem so that audit
> > analysis is quicker, intuitive, and more useful.
>
> Thanks. I've massaged it a bit to make it apply to the RPM, and audit.35
> is building.
... now uploaded.
Before I go downloading the whole 40 meg of the audit.35.src.rpm, is there
an easy way to get just the current version of the git-audit.patch that will
eventually go to Andrew Morton for the next -mm kernel? With my current
workflow, 12-rc3-mm3 + git-audit.patch is easier to deal with. A close second
would be some way to pull the -audit.*.patch files w/o the whole .src.rpm...
(and yes, if the answer is "point git at this URI", I could probably figure
out how to install/use git. ;)
1:02 p.m.
New subject: audit.35 kernel... Re: [PATCH] add message types
* Valdis.Kletnieks(a)vt.edu (Valdis.Kletnieks(a)vt.edu) wrote:
On Wed, 11 May 2005 17:27:24 BST, David Woodhouse said:
> On Wed, 2005-05-11 at 16:38 +0100, David Woodhouse wrote:
> > > This patch adds more messages types to the audit subsystem so that audit
> > > analysis is quicker, intuitive, and more useful.
> >
> > Thanks. I've massaged it a bit to make it apply to the RPM, and audit.35
> > is building.
>
> ... now uploaded.
Before I go downloading the whole 40 meg of the audit.35.src.rpm, is there
an easy way to get just the current version of the git-audit.patch that will
eventually go to Andrew Morton for the next -mm kernel? With my current
workflow, 12-rc3-mm3 + git-audit.patch is easier to deal with. A close second
would be some way to pull the -audit.*.patch files w/o the whole .src.rpm...
(and yes, if the answer is "point git at this URI", I could probably figure
out how to install/use git. ;)
That's the answer. It's at:
kernel.org/pub/scm/linux/kernel/git/dwmw2/audit-2.6
thanks,
-chris
9:31 a.m.
New subject: audit.35 kernel... Re: [PATCH] add message types
On Wed, 11 May 2005 11:02:53 PDT, Chris Wright said:
> (and yes, if the answer is "point git at this URI", I
could probably figure
> out how to install/use git. ;)
That's the answer. It's at:
kernel.org/pub/scm/linux/kernel/git/dwmw2/audit-2.6
OK.. Given that, any inability to track both audit and -mm is my own stupidity. ;)
10:58 a.m.
On Wed, 2005-05-11 at 10:56 -0400, Steve Grubb wrote:
+ ab = audit_log_start(context, aux->type);
if (!ab)
continue; /* audit_panic has been called */
-
- aux = context->aux;
context->aux = aux->next;
audit_log_format(ab, "auxitem=%d", aux->type);
Any objection to dropping the now-redundant 'auxitem='?
--
dwmw2
7163
days inactive
7165
days old
linux-audit@lists.linux-audit.osci.io
9 comments
5 participants
participants (5)
-
Chris Wright -
David Woodhouse -
Steve Grubb -
Timothy R. Chavez -
Valdis.Kletnieks＠vt.edu