Re: auditing kdbus service names

2015-08-12 Thread Paul Moore
On Wednesday, August 12, 2015 05:38:14 PM Steve Grubb wrote: > On Wednesday, August 12, 2015 08:40:34 AM Paul Moore wrote: > > Hello all, > > > > I'm currently working on a set of LSM hooks for the new kdbus IPC > > mechanism > > and one of the things that I believe we will need to add is a new au

Re: [PATCH V10] fixup: audit: implement audit by executable

2015-08-12 Thread Paul Moore
On Wednesday, August 12, 2015 11:19:44 AM Richard Guy Briggs wrote: > On 15/08/12, Paul Moore wrote: > > On Wednesday, August 12, 2015 05:48:48 AM Richard Guy Briggs wrote: > > > Do you plan to push this fix to next? > > > > Patience. Yes, I'll be pushing this to next sometime this week; as usual

Re: auditing kdbus service names

2015-08-12 Thread Steve Grubb
On Wednesday, August 12, 2015 08:40:34 AM Paul Moore wrote: > Hello all, > > I'm currently working on a set of LSM hooks for the new kdbus IPC mechanism > and one of the things that I believe we will need to add is a new audit > field for the kdbus service name (very similar to the old fashioned d

Re: [PATCH V10] fixup: audit: implement audit by executable

2015-08-12 Thread Richard Guy Briggs
On 15/08/12, Paul Moore wrote: > On Wednesday, August 12, 2015 05:48:48 AM Richard Guy Briggs wrote: > > > > Do you plan to push this fix to next? > > Patience. Yes, I'll be pushing this to next sometime this week; as usual > I'll > send mail when I do. Ok, no problem, I'm not rushing. I was

Re: [PATCH V10] fixup: audit: implement audit by executable

2015-08-12 Thread Paul Moore
On Wednesday, August 12, 2015 05:48:48 AM Richard Guy Briggs wrote: > > Do you plan to push this fix to next? Patience. Yes, I'll be pushing this to next sometime this week; as usual I'll send mail when I do. -- paul moore security @ redhat -- Linux-audit mailing list Linux-audit@redhat.com h

auditing kdbus service names

2015-08-12 Thread Paul Moore
Hello all, I'm currently working on a set of LSM hooks for the new kdbus IPC mechanism and one of the things that I believe we will need to add is a new audit field for the kdbus service name (very similar to the old fashioned dbus service name). I was thinking "kdbus_svc" for the field name,

Re: [PATCH V10] fixup: audit: implement audit by executable

2015-08-12 Thread Richard Guy Briggs
On 15/08/11, Richard Guy Briggs wrote: > On 15/08/10, Paul Moore wrote: > > On Monday, August 10, 2015 01:29:43 PM Richard Guy Briggs wrote: > > > On 15/08/10, Paul Moore wrote: > > > > On Saturday, August 08, 2015 10:20:25 AM Richard Guy Briggs wrote: > > > > > diff --git a/kernel/audit_watch.c b/