Hi Linus,
Here are the audit patches for the v5.9 merge window. All of the
patches in this pull request pass our test suite and merged cleanly
with your tree from a few hours ago.
Aside from some smaller bug fixes, here are the highlights:
- Add a new backlog wait metric to the audit status message, this is
intended to help admins determine how long processes have been waiting
for the audit backlog queue to clear
- Generate audit records for nftables configuration changes
- Generate CWD audit records for for the relevant LSM audit records
Please merge for v5.9, thanks,
-Paul
--
The following changes since commit b3a9e3b9622ae10064826dccb4f7a52bd88c7407:
Linux 5.8-rc1 (2020-06-14 12:45:04 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git
tags/audit-pr-20200803
for you to fetch changes up to b43870c74f3fdf0cd06bf5f1b7a5ed70a2cd4ed2:
audit: report audit wait metric in audit status reply
(2020-07-21 11:21:44 -0400)
----------------------------------------------------------------
audit/stable-5.9 PR 20200803
----------------------------------------------------------------
Gustavo A. R. Silva (1):
audit: Use struct_size() helper in alloc_chunk
Max Englander (1):
audit: report audit wait metric in audit status reply
Paul Moore (1):
audit: use the proper gfp flags in the audit_log_nfcfg() calls
Richard Guy Briggs (5):
audit: log nftables configuration change events
audit: add gfp parameter to audit_log_nfcfg
audit: remove unused !CONFIG_AUDITSYSCALL __audit_inode* stubs
audit: issue CWD record to accompany LSM_AUDIT_DATA_* records
audit: purge audit_log_string from the intra-kernel audit API
include/linux/audit.h | 46 +++++++++++------
include/uapi/linux/audit.h | 18 ++++---
kernel/audit.c | 39 +++++++++-----
kernel/audit_tree.c | 4 +-
kernel/auditsc.c | 45 +++++++++++++---
net/bridge/netfilter/ebtables.c | 6 +--
net/netfilter/nf_tables_api.c | 112 ++++++++++++++++++++++++++++++++++++
net/netfilter/x_tables.c | 5 +-
security/apparmor/audit.c | 10 ++--
security/apparmor/file.c | 25 +++------
security/apparmor/ipc.c | 46 ++++++++---------
security/apparmor/net.c | 14 ++---
security/lsm_audit.c | 9 +++-
13 files changed, 273 insertions(+), 106 deletions(-)
--
paul moore
www.paul-moore.com
