Linus, Just one audit patch queued for v5.18: - Change the AUDIT_TIME_* record generation so that they are generated at syscall exit time and subject to all of the normal syscall exit filtering. This should help reduce noise and ensure those records which are most relevant to the admin's audit configuration are recorded in the audit log. Please merge, -Paul -- The following changes since commit e783362eb54cd99b2cac8b3a9aeac942e6f6ac07: Linux 5.17-rc1 (2022-01-23 10:12:53 +0200) are available in the Git repository at: https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git tags/audit-pr-20220321 for you to fetch changes up to 272ceeaea355214b301530e262a0df8600bfca95: audit: log AUDIT_TIME_* records only from rules (2022-02-22 13:51:40 -0500) ---------------------------------------------------------------- audit/stable-5.18 PR 20220321 ---------------------------------------------------------------- Richard Guy Briggs (1): audit: log AUDIT_TIME_* records only from rules kernel/audit.h | 4 +++ kernel/auditsc.c | 87 +++++++++++++++++++++++++++++++++++++++----------- 2 files changed, 71 insertions(+), 20 deletions(-) -- paul-moore.com