> > The integrity patches are in security-testing-2.6/#next and the auditd > > patch I just posted to linux-audit. How do you suggest we go forward? > > We need to go over the event format and make sure its got everything we need > in it. We also need to review the code that touches the audit system and make > sure its using the audit API the way we intended. I'd like to do this on the > linux-audit mail list so there is a record of it in the audit archives. > > Thanks, > -Steve
As per Steve's request, I'm posting the integrity patches here. These patches are dependent on the following TPM patches: http://lkml.org/lkml/2009/2/2/162 http://lkml.org/lkml/2009/2/5/151 The auditd patch was already posted here. Mimi James Morris (1): IMA: fix ima_delete_rules() definition Mimi Zohar (7): integrity: IMA hooks integrity: IMA as an integrity service provider integrity: IMA display integrity: IMA policy integrity: IMA policy open Integrity: IMA file free imbalance Integrity: IMA update maintainers -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit