RE: [PATCH 14/15] kernel: convert futex_pi_state.refcount from atomic_t to refcount_t

> On Mon, 17 Jul 2017, Elena Reshetova wrote: > > > Subject: kernel: convert futex_pi_state.refcount from atomic_t to refcount_t > > Several people including myself told you already, that subjects consist of > > SUBSYSTEMPREFIX: Concise description > > It's easy enough to figure the prefix out

[PATCH] Free skb at error context in auditd_send_unicast_skb().

I got following memory leak reports by kmemleak. unreferenced object 0x965962fa0600 (size 256): comm "auditd", pid 401, jiffies 4294671604 (age 62.331s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Re: AUDITs needed

I hope that someone can help me with accomplishing this list of AUDIT goals. -- Warron French On Fri, Jul 14, 2017 at 6:03 PM, warron.french wrote: > This may be faster and also a better way to summarize and share with > others. > I will list the AUDIT(test#letter) and

Re: Auditing Logons/Logoffs

On Friday, July 14, 2017 5:18:13 PM EDT warron.french wrote: > OK, so no rules to be found specifically/explicitly in audit.rules (for > RHEL6 nor RHEL7) because it is hardwired/embedded in the code of auditd > already? Not auditd. In whatever observes the event. Pam observes the login for sshd a

Re: [PATCH 14/15] kernel: convert futex_pi_state.refcount from atomic_t to refcount_t

On Mon, 17 Jul 2017, Elena Reshetova wrote: > Subject: kernel: convert futex_pi_state.refcount from atomic_t to refcount_t Several people including myself told you already, that subjects consist of SUBSYSTEMPREFIX: Concise description It's easy enough to figure the prefix out by looking at the

[PATCH 10/15] kernel: convert nsproxy.count from atomic_t to refcount_t

refcount_t type and corresponding API should be used instead of atomic_t when the variable is used as a reference counter. This allows to avoid accidental refcounter overflows that might lead to use-after-free situations. Suggested-by: Kees Cook Reviewed-by: David Windsor Reviewed-by: Hans Lilje

[PATCH 12/15] kernel: convert cred.usage from atomic_t to refcount_t

refcount_t type and corresponding API should be used instead of atomic_t when the variable is used as a reference counter. This allows to avoid accidental refcounter overflows that might lead to use-after-free situations. Suggested-by: Kees Cook Reviewed-by: David Windsor Reviewed-by: Hans Lilje

[PATCH 09/15] kernel: convert uprobe.ref from atomic_t to refcount_t

refcount_t type and corresponding API should be used instead of atomic_t when the variable is used as a reference counter. This allows to avoid accidental refcounter overflows that might lead to use-after-free situations. Suggested-by: Kees Cook Reviewed-by: David Windsor Reviewed-by: Hans Lilje

[PATCH 13/15] sched: convert numa_group.refcount from atomic_t to refcount_t

refcount_t type and corresponding API should be used instead of atomic_t when the variable is used as a reference counter. This allows to avoid accidental refcounter overflows that might lead to use-after-free situations. Suggested-by: Kees Cook Reviewed-by: David Windsor Reviewed-by: Hans Lilje

[PATCH 11/15] kernel: convert group_info.usage from atomic_t to refcount_t

refcount_t type and corresponding API should be used instead of atomic_t when the variable is used as a reference counter. This allows to avoid accidental refcounter overflows that might lead to use-after-free situations. Suggested-by: Kees Cook Reviewed-by: David Windsor Reviewed-by: Hans Lilje

[PATCH 06/15] kernel: convert perf_event_context.refcount from atomic_t to refcount_t

refcount_t type and corresponding API should be used instead of atomic_t when the variable is used as a reference counter. This allows to avoid accidental refcounter overflows that might lead to use-after-free situations. Suggested-by: Kees Cook Reviewed-by: David Windsor Reviewed-by: Hans Lilje

[PATCH 14/15] kernel: convert futex_pi_state.refcount from atomic_t to refcount_t

refcount_t type and corresponding API should be used instead of atomic_t when the variable is used as a reference counter. This allows to avoid accidental refcounter overflows that might lead to use-after-free situations. Suggested-by: Kees Cook Reviewed-by: David Windsor Reviewed-by: Hans Lilje

[PATCH 02/15] kernel: convert signal_struct.sigcnt from atomic_t to refcount_t

refcount_t type and corresponding API should be used instead of atomic_t when the variable is used as a reference counter. This allows to avoid accidental refcounter overflows that might lead to use-after-free situations. Suggested-by: Kees Cook Reviewed-by: David Windsor Reviewed-by: Hans Lilje

[PATCH 00/15] v3 kernel core pieces refcount conversions

Changes in v3: * SoB chain corrected * minor corrections based on v2 feedback * rebase on linux-next/master as of today Changes in v2: * dropped already merged patches * rebase on top of linux-next/master * Now by default refcount_t = atomic_t (*) and uses all atomic standard operations u

[PATCH 08/15] kernel: convert ring_buffer.aux_refcount from atomic_t to refcount_t

refcount_t type and corresponding API should be used instead of atomic_t when the variable is used as a reference counter. This allows to avoid accidental refcounter overflows that might lead to use-after-free situations. Suggested-by: Kees Cook Reviewed-by: David Windsor Reviewed-by: Hans Lilje

[PATCH 04/15] kernel: convert task_struct.usage from atomic_t to refcount_t

refcount_t type and corresponding API should be used instead of atomic_t when the variable is used as a reference counter. This allows to avoid accidental refcounter overflows that might lead to use-after-free situations. Suggested-by: Kees Cook Reviewed-by: David Windsor Reviewed-by: Hans Lilje

[PATCH 05/15] kernel: convert task_struct.stack_refcount from atomic_t to refcount_t

refcount_t type and corresponding API should be used instead of atomic_t when the variable is used as a reference counter. This allows to avoid accidental refcounter overflows that might lead to use-after-free situations. Suggested-by: Kees Cook Reviewed-by: David Windsor Reviewed-by: Hans Lilje

[PATCH 07/15] kernel: convert ring_buffer.refcount from atomic_t to refcount_t

refcount_t type and corresponding API should be used instead of atomic_t when the variable is used as a reference counter. This allows to avoid accidental refcounter overflows that might lead to use-after-free situations. Suggested-by: Kees Cook Reviewed-by: David Windsor Reviewed-by: Hans Lilje

[PATCH 01/15] kernel: convert sighand_struct.count from atomic_t to refcount_t

refcount_t type and corresponding API should be used instead of atomic_t when the variable is used as a reference counter. This allows to avoid accidental refcounter overflows that might lead to use-after-free situations. Suggested-by: Kees Cook Reviewed-by: David Windsor Reviewed-by: Hans Lilje

[PATCH 03/15] kernel: convert user_struct.__count from atomic_t to refcount_t

refcount_t type and corresponding API should be used instead of atomic_t when the variable is used as a reference counter. This allows to avoid accidental refcounter overflows that might lead to use-after-free situations. Suggested-by: Kees Cook Reviewed-by: David Windsor Reviewed-by: Hans Lilje

[PATCH 15/15] kernel: convert kcov.refcount from atomic_t to refcount_t

refcount_t type and corresponding API should be used instead of atomic_t when the variable is used as a reference counter. This allows to avoid accidental refcounter overflows that might lead to use-after-free situations. Suggested-by: Kees Cook Reviewed-by: David Windsor Reviewed-by: Hans Lilje