Hi Linux, The audit changes for v4.11 are relatively small compared to what we did for v4.10, both in terms of size and impact. The two patches from Steve tweak the formatting for some of the audit records to make them more consistent with other audit records. The three patches from Richard record the name of a module on module load, fix the logging of sockaddr information when using socketcall() on 32-bit systems, and add the ability to reset audit's lost record counter. My lone patch just fixes an annoying style nit that I was reminded about by one of Richard's patches.
All these patches pass our test suite, please merge them for v4.11. Thanks, -Paul --- The following changes since commit 533c7b69c764ad5febb3e716899f43a75564fcab: audit: use proper refcount locking on audit_sock (2016-12-14 13:06:04 -0500) are available in the git repository at: git://git.infradead.org/users/pcmoore/audit stable-4.11 for you to fetch changes up to fe8e52b9b9100c486051aaf5208dbf4072bb87b1: audit: remove unnecessary curly braces from switch/case statements (2017-02-14 13:32:12 -0500) ---------------------------------------------------------------- Paul Moore (1): audit: remove unnecessary curly braces from switch/case statements Richard Guy Briggs (3): audit: add feature audit_lost reset audit: log 32-bit socketcalls audit: log module name on init_module Steve Grubb (2): audit: Make AUDIT_KERNEL event conform to the specification audit: Make AUDIT_ANOM_ABEND event normalized include/linux/audit.h | 32 ++++++++++++++++++++++++++++++++ include/uapi/linux/audit.h | 7 ++++++- kernel/audit.c | 12 ++++++++++-- kernel/audit.h | 3 +++ kernel/auditsc.c | 40 +++++++++++++++++++++++++++------------- kernel/module.c | 5 ++++- net/compat.c | 17 ++++++++++++++--- 7 files changed, 96 insertions(+), 20 deletions(-) -- paul moore security @ redhat