Re: auditd and hidden ports

2017-12-18 Thread Steve Grubb
Hello, On Monday, December 18, 2017 2:37:53 PM EST Yectli Huerta wrote: > unhide reports that there are ports that are not being seeing by ss. i > also used lsof and netstat and they don't show up. > > [~] % sudo unhide-tcp > Unhide-tcp 20130526 > Copyright © 2013 Yago Jesus & Patrick Gouin >

Re: [trivial PATCH] treewide: Align function definition open/close braces

2017-12-18 Thread Paul Moore
On Sun, Dec 17, 2017 at 7:28 PM, Joe Perches wrote: > Some functions definitions have either the initial open brace and/or > the closing brace outside of column 1. > > Move those braces to column 1. > > This allows various function analyzers like gnu complexity to work >

Re: [trivial PATCH] treewide: Align function definition open/close braces

2017-12-18 Thread Rafael J. Wysocki
On Monday, December 18, 2017 1:28:44 AM CET Joe Perches wrote: > Some functions definitions have either the initial open brace and/or > the closing brace outside of column 1. > > Move those braces to column 1. > > This allows various function analyzers like gnu complexity to work > properly for

auditd and hidden ports

2017-12-18 Thread Yectli Huerta
Hi, unhide reports that there are ports that are not being seeing by ss. i also used lsof and netstat and they don't show up. [~] % sudo unhide-tcp Unhide-tcp 20130526 Copyright © 2013 Yago Jesus & Patrick Gouin License GPLv3+ : GNU GPL version 3 or later http://www.unhide-forensics.info Used

Re: audit-userspace: auparse/lru.c sanity_check_queue() compile error with DEBUG

2017-12-18 Thread Steve Grubb
On Sunday, December 17, 2017 8:19:14 PM EST Mor, Omri wrote: > sanity_check_queue() attempts to call msg(), which as far as I can tell > isn’t defined. It appears that this should be syslog() or audit_msg() > instead. > This causes compilation failure when DEBUG is defined. Thanks for reporting

audit-userspace: auparse/lru.c sanity_check_queue() compile error with DEBUG

2017-12-18 Thread Mor, Omri
sanity_check_queue() attempts to call msg(), which as far as I can tell isn’t defined. It appears that this should be syslog() or audit_msg() instead. This causes compilation failure when DEBUG is defined. Omri Mor -- Linux-audit mailing list Linux-audit@redhat.com

[trivial PATCH] treewide: Align function definition open/close braces

2017-12-18 Thread Joe Perches
Some functions definitions have either the initial open brace and/or the closing brace outside of column 1. Move those braces to column 1. This allows various function analyzers like gnu complexity to work properly for these modified functions. Miscellanea: o Remove extra trailing ; and blank

Re: Unique audit record type ranges for individual LSMs

2017-12-18 Thread Laurent Bigonville
Le 06/12/17 à 18:51, Tyler Hicks a écrit : If so, does everyone agree that 1500-1599 would be acceptable for AppArmor to use? FTR, the apparmor usespace library seems to support the 15xx range for quite sometimes already, I see the following commit in the git repository: commit