Re: [PATCH ghak90 V7 20/21] audit: add capcontid to set contid outside init_user_ns

2019-10-31 Thread Paul Moore
On Thu, Oct 31, 2019 at 10:51 AM Steve Grubb wrote: > On Wednesday, October 30, 2019 6:03:20 PM EDT Richard Guy Briggs wrote: > > > Also, for the record, removing the audit loginuid from procfs is not > > > something to take lightly, if at all; like it or not, it's part of the > > > kernel API. >

Re: [PATCH] audit: set context->dummy even when audit is off

2019-10-31 Thread Paul Moore
On Thu, Oct 31, 2019 at 12:40 PM Chris Mason wrote: > Dave Jones reported that we're finding a considerable amount of dmesg > traffic from NTP time adjustments being reported through the audit > subsystem. His original post is here: > > https://lore.kernel.org/lkml/20190923155041.ga14...@codemonk

[PATCH] audit: set context->dummy even when audit is off

2019-10-31 Thread Chris Mason
Dave Jones reported that we're finding a considerable amount of dmesg traffic from NTP time adjustments being reported through the audit subsystem. His original post is here: https://lore.kernel.org/lkml/20190923155041.ga14...@codemonkey.org.uk/ The confusing part is that we're seeing this on ma

Re: [PATCH ghak90 V7 20/21] audit: add capcontid to set contid outside init_user_ns

2019-10-31 Thread Steve Grubb
Hello, TLDR; I see a lot of benefit to switching away from procfs for setting auid & sessionid. On Wednesday, October 30, 2019 6:03:20 PM EDT Richard Guy Briggs wrote: > > Also, for the record, removing the audit loginuid from procfs is not > > something to take lightly, if at all; like it or n

Re: [PATCH ghak90 V7 20/21] audit: add capcontid to set contid outside init_user_ns

2019-10-31 Thread Paul Moore
On Wed, Oct 30, 2019 at 6:04 PM Richard Guy Briggs wrote: > On 2019-10-30 16:27, Paul Moore wrote: > > On Thu, Oct 24, 2019 at 5:00 PM Richard Guy Briggs wrote: > > > Here's the note I had from that meeting: > > > > > > - Eric raised the issue that using /proc is likely to get more and more > > >