Audit roadmap and new development

[Steve Grubb]

On Sun, 11 Mar 2018 17:44:39 +0000
F Rafi <farhanible at gmail.com> wrote:

> So container support can be addressed by userspace changes alone

Nope.

> Or will it require kernel audit subsystem updates as well?

The kernel does all the heavy lifting. What this is indicating is that
user space will pick up support to use the kernel's container auditing.
You may have seen a set of patches posted by Richard in the last 2
weeks. That is for the kernel side. There will need to be corresponding
user space code to interface to it. This is probably going to change
events enough that it's again a good reason to break with the old.

-Steve


> On Sun, Mar 11, 2018 at 1:08 PM Paul Moore <paul at paul-moore.com>
> wrote:
> 
> > On Sun, Mar 11, 2018 at 5:38 AM, Steve Grubb <sgrubb at redhat.com>
> > wrote:  
> > > Hello,
> > >
> > > I wanted to take a few minutes to chat about the future audit
> > > roadmap. The release of audit-2.8.3 represents a breaking
> > > point ...  
> >
> > Just a quick note that Steve is talking about the audit userspace
> > which he maintains, the work for the Linux Kernel's audit subsystem
> > is tracked via GitHub (link below).  This includes both bug reports
> > *and* new feature requests.  If you would like to add to that list,
> > feel free to do so.  If you want to help out and contribute,
> > definitely feel free to do so! ;)
> >
> > * https://github.com/linux-audit/audit-kernel/issues
> >
> > --
> > paul moore
> > www.paul-moore.com
> >
> > --
> > Linux-audit mailing list
> > Linux-audit at redhat.com
> > https://www.redhat.com/mailman/listinfo/linux-audit
> >