Re: [PATCH ghak59 V3 2/4] audit: add syscall information to CONFIG_CHANGE records
On 2019-01-17 12:36, Paul Moore wrote:
On Thu, Jan 17, 2019 at 11:08 AM Steve Grubb
<sgrubb(a)redhat.com> wrote:
> On Thu, 17 Jan 2019 08:21:40 -0500 Paul Moore <paul(a)paul-moore.com> wrote:
> > On Thu, Jan 17, 2019 at 4:33 AM Steve Grubb <sgrubb(a)redhat.com> wrote:
> > > On Mon, 14 Jan 2019 17:58:58 -0500 Paul Moore <paul(a)paul-moore.com>
wrote:
> > > > On Mon, Dec 10, 2018 at 5:18 PM Richard Guy Briggs
<rgb(a)redhat.com> wrote:
> > > > > Tie syscall information to all CONFIG_CHANGE calls since they
> > > > > are all a result of user actions.
I see you added LKML to the To/CC line. Fun. Unless they've
been
following the audit list for the past several years I'm not sure they
have all the context to fully understand some of the things in this
thread, but sure, why not.
I added LKML in the original patchset posting, not Steve.
paul moore
- RGB
--
Richard Guy Briggs <rgb(a)redhat.com>
Sr. S/W Engineer, Kernel Security, Base Operating Systems
Remote, Ottawa, Red Hat Canada
IRC: rgb, SunRaycer
Voice: +1.647.777.2635, Internal: (81) 32635