[GIT PULL] Audit patches for v5.18

Paul Moore paul at paul-moore.com
Mon Mar 21 22:21:08 UTC 2022


Linus,

Just one audit patch queued for v5.18:

- Change the AUDIT_TIME_* record generation so that they are generated
at syscall exit time and subject to all of the normal syscall exit
filtering.  This should help reduce noise and ensure those records
which are most relevant to the admin's audit configuration are
recorded in the audit log.

Please merge,
-Paul

--
The following changes since commit e783362eb54cd99b2cac8b3a9aeac942e6f6ac07:

 Linux 5.17-rc1 (2022-01-23 10:12:53 +0200)

are available in the Git repository at:

 https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git
   tags/audit-pr-20220321

for you to fetch changes up to 272ceeaea355214b301530e262a0df8600bfca95:

 audit: log AUDIT_TIME_* records only from rules
   (2022-02-22 13:51:40 -0500)

----------------------------------------------------------------
audit/stable-5.18 PR 20220321

----------------------------------------------------------------
Richard Guy Briggs (1):
     audit: log AUDIT_TIME_* records only from rules

kernel/audit.h   |  4 +++
kernel/auditsc.c | 87 +++++++++++++++++++++++++++++++++++++++-----------
2 files changed, 71 insertions(+), 20 deletions(-)

-- 
paul-moore.com



More information about the Linux-audit mailing list