Re: Rational behind RefuseManualStop=yes in auditd.service

2013-12-18 Thread Eric Paris
On Tue, 2013-12-03 at 12:16 -0800, Tony Jones wrote: > On 07/30/2013 01:25 PM, Steve Grubb wrote: > > On Tuesday, July 30, 2013 10:04:46 PM Laurent Bigonville wrote: > >> Hi, > >> > >> I would like to know the rational behind RefuseManualStop=yes in > >> auditd.service file. > > > > The short term

Re: Rational behind RefuseManualStop=yes in auditd.service

2013-12-18 Thread Tony Jones
On 12/18/2013 12:38 PM, Eric Paris wrote: > He made the change in the upstream repo, because that's what you need > for certification purposes. Personally, I hate it, cause i don't give a > hoot about that and would rather things to be consistent, but that's the > rational. A certifiable audit n

Re: Rational behind RefuseManualStop=yes in auditd.service

2013-12-18 Thread Tony Jones
On 12/18/2013 01:07 PM, Tony Jones wrote: > On 12/18/2013 12:38 PM, Eric Paris wrote: > >> He made the change in the upstream repo, because that's what you need >> for certification purposes. Personally, I hate it, cause i don't give a >> hoot about that and would rather things to be consistent,

Re: [PATCH] audit: fix build error when disable audit

2013-12-18 Thread Gao feng
On 12/19/2013 10:34 AM, Gao feng wrote: > kernel/capability.c: In function ‘SYSC_capset’: > kernel/capability.c:280:2: warning: passing argument 1 of ‘audit_log_capset’ > makes integer from pointer without a cast [enabled by default] > audit_log_capset(new, current_cred()); > ^ > In file inclu

[PATCH] audit: fix build error when disable audit

2013-12-18 Thread Gao feng
kernel/capability.c: In function ‘SYSC_capset’: kernel/capability.c:280:2: warning: passing argument 1 of ‘audit_log_capset’ makes integer from pointer without a cast [enabled by default] audit_log_capset(new, current_cred()); ^ In file included from kernel/capability.c:10:0: include/linux/aud

Re: [PATCH] audit: listen in all network namespaces

2013-12-18 Thread Gao feng
On 07/17/2013 04:32 AM, Richard Guy Briggs wrote: > Convert audit from only listening in init_net to use register_pernet_subsys() > to dynamically manage the netlink socket list. > > Signed-off-by: Richard Guy Briggs > --- I think it's the time for us to discuss if we should revert this commit,