summaryrefslogtreecommitdiff
path: root/kernel/audit.h
AgeCommit message (Expand)AuthorFilesLines
2020-07-29revert: 1320a4052ea1 ("audit: trigger accompanying records when no rules pres...Paul Moore1-8/+0
2020-04-22audit: fix a net reference leak in audit_list_rules_send()Paul Moore1-1/+1
2020-03-12audit: trigger accompanying records when no rules presentRichard Guy Briggs1-0/+8
2019-07-09Merge tag 'audit-pr-20190702' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-2/+6
2019-05-30treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156Thomas Gleixner1-14/+1
2019-05-22audit: deliver signal_info regarless of syscallRichard Guy Briggs1-2/+6
2019-04-29audit_compare_dname_path(): switch to const struct qstr *Al Viro1-1/+1
2019-02-08audit: hide auditsc_get_stamp and audit_serial prototypesRichard Guy Briggs1-0/+5
2019-02-04audit: remove audit_context when CONFIG_ AUDIT and not AUDITSYSCALLRichard Guy Briggs1-9/+0
2019-01-31audit: ignore fcaps on umountRichard Guy Briggs1-1/+1
2019-01-26audit: clean up AUDITSYSCALL prototypes and stubsRichard Guy Briggs1-31/+33
2019-01-25audit: add support for fcaps v3Richard Guy Briggs1-0/+1
2019-01-15audit: hand taken context to audit_kill_trees for syscall loggingRichard Guy Briggs1-2/+2
2018-11-27audit: use current whenever possiblePaul Moore1-1/+1
2018-11-20audit: remove WATCH and TREE config optionsRichard Guy Briggs1-3/+3
2018-11-19audit: localize audit_log_session_info prototypeRichard Guy Briggs1-0/+2
2018-02-23audit: track the owner of the command mutex ourselvesPaul Moore1-1/+2
2017-11-16Merge tag 'audit-pr-20171113' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-1/+1
2017-11-11audit: convert audit_ever_enabled to a booleanPaul Moore1-1/+1
2017-09-04ipc: mqueue: Replace timespec with timespec64Deepa Dinamani1-1/+1
2017-06-13audit: style fixDerek Robson1-14/+14
2017-05-31audit: add ambient capabilities to CAPSET and BPRM_FCAPS recordsRichard Guy Briggs1-0/+1
2017-05-02audit: Use timespec64 to represent audit timestampsDeepa Dinamani1-1/+1
2017-05-02audit: store the auditd PID as a pid struct instead of pid_tPaul Moore1-1/+1
2017-05-02audit: kernel generated netlink traffic should have a portid of 0Paul Moore1-2/+1
2017-03-27audit: move audit_signal_info() into kernel/auditsc.cPaul Moore1-7/+1
2017-03-21audit: fix auditd/kernel connection state trackingPaul Moore1-7/+2
2017-02-22Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-0/+3
2017-02-14audit: log module name on init_moduleRichard Guy Briggs1-0/+3
2016-12-06audit_log_{name,link_denied}: constify struct pathAl Viro1-1/+1
2016-07-30Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-0/+2
2016-06-28audit: move audit_get_tty to reduce scope and kabi changesRichard Guy Briggs1-0/+4
2016-06-27audit: add fields to exclude filter by reusing user filterRichard Guy Briggs1-0/+2
2015-12-24security: Make inode argument of inode_getsecid non-constAndreas Gruenbacher1-1/+1
2015-11-04audit: audit_tree_match can be booleanYaowei Bai1-1/+1
2015-09-08Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-0/+18
2015-08-06audit: implement audit by executableRichard Guy Briggs1-0/+4
2015-08-06audit: clean simple fsnotify implementationRichard Guy Briggs1-0/+14
2015-04-23Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-0/+3
2015-02-24audit: consolidate handling of mm->exe_fileDavidlohr Bueso1-0/+3
2015-01-23audit: replace getname()/putname() hacks with reference countersPaul Moore1-15/+2
2014-09-24audit: reduce scope of audit_log_fcapsRichard Guy Briggs1-1/+0
2014-03-20audit: Use struct net not pid_t to remember the network namespce to reply inEric W. Biederman1-1/+1
2014-03-20audit: Audit proc/<pid>/cmdline aka proctitleWilliam Roberts1-0/+6
2014-01-14audit: Convert int limit uses to u32Joe Perches1-1/+1
2014-01-14audit: listen in all network namespacesRichard Guy Briggs1-0/+5
2014-01-14audit: fix netlink portid naming and typesRichard Guy Briggs1-4/+4
2013-11-05audit: call audit_bprm() only once to add AUDIT_EXECVE informationRichard Guy Briggs1-1/+0
2013-11-05audit: move audit_aux_data_execve contents into audit_context unionRichard Guy Briggs1-0/+4
2013-07-09audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_...Jeff Layton1-0/+1