https://github.com/linux-audit/audit-kernel/wiki/RFE-Session-ID-User-Filter
RFE Session ID User Filter
 
https://github.com/linux-audit/audit-kernel/issues/4
RFE: add a session ID filter to the kernel's user filter

See also the set of userspace suport patches:
        Add support for sessionid user filters, sessionid_set and loginuid_set
        https://www.redhat.com/archives/linux-audit/2016-August/msg00005.html
and the test case:
        
https://github.com/rgbriggs/audit-testsuite/tree/ghak4-test-for-sessionID-user-filter

Richard Guy Briggs (2):
  audit: add support for session ID user filter
  audit: add AUDIT_SESSIONID_SET support

 include/linux/audit.h      |   10 ++++++++++
 include/uapi/linux/audit.h |    2 ++
 kernel/auditfilter.c       |    5 +++++
 kernel/auditsc.c           |    6 ++++++
 4 files changed, 23 insertions(+), 0 deletions(-)

Reply via email to