[PATCH] auvirt: a new tool for reporting events related to virtual machines

Marcelo Cerri mhcerri at linux.vnet.ibm.com
Fri Jan 27 17:31:40 UTC 2012


Sure. Here it is.

http://libvirt.org/git/?p=libvirt.git;a=commit;h=98b01e8f2bf3dd3c8a8881f2a94af3f9d1a95620

Regards,
Marcelo

On 01/27/2012 03:21 PM, Steve Grubb wrote:
> On Friday, January 27, 2012 11:37:00 AM Marcelo Cerri wrote:
>> I submitted a patch to libvirt to add the qemu pid (vm-pid) to the
>> VIRT_CONTROL audit record.
>>
>> I'm using this field to correlate anomaly events to guest in auvirt and
>> as a fallback it tries to use the SELinux context for that.
> OK, that sounds great. Its probably the best way to handle the situation. Do,
> you have a link to the patch or commit message?
>
> Thanks,
> -Steve
>




More information about the Linux-audit mailing list