Hi Linus, A small set of audit patches for v5.11 with four patches in total and only one of any real significance. Richard's patch to trigger accompanying records causes the kernel to emit additional related records when an audit event occurs; helping provide some much needed context to events in the audit log. It is also worth mentioning that this is a revised patch based on an earlier attempt that had to be reverted in the v5.8 time frame. Everything passes our test suite, and with no problems reported please merge this for v5.11. Thanks, -Paul -- The following changes since commit 3650b228f83adda7e5ee532e2b90429c03f7b9ec: Linux 5.10-rc1 (2020-10-25 15:14:11 -0700) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git tags/audit-pr-20201214 for you to fetch changes up to 6b3211842a115d697fbf78d09f3e83852200e413: audit: replace atomic_add_return() (2020-12-02 22:52:16 -0500) ---------------------------------------------------------------- audit/stable-5.11 PR 20201214 ---------------------------------------------------------------- Alex Shi (1): audit: fix macros warnings Mauro Carvalho Chehab (1): audit: fix a kernel-doc markup Richard Guy Briggs (1): audit: trigger accompanying records when no rules present Yejune Deng (1): audit: replace atomic_add_return() include/linux/audit.h | 8 -------- kernel/audit.c | 9 ++++++--- kernel/auditsc.c | 38 ++++++++++++-------------------------- security/lsm_audit.c | 5 ----- 4 files changed, 18 insertions(+), 42 deletions(-) -- paul moore www.paul-moore.com