Re: [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants

2021-03-03 Thread Casey Schaufler
On 3/3/2021 4:46 PM, Paul Moore wrote: > On Mon, Feb 22, 2021 at 6:59 PM Casey Schaufler > wrote: >> On 2/20/2021 6:41 AM, Paul Moore wrote: >>> On Fri, Feb 19, 2021 at 8:49 PM Casey Schaufler >>> wrote: On 2/19/2021 3:28 PM, Paul Moore wrote: > As discussed briefly on the list (lore

Re: [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants

2021-03-03 Thread Paul Moore
On Mon, Feb 22, 2021 at 6:59 PM Casey Schaufler wrote: > On 2/20/2021 6:41 AM, Paul Moore wrote: > > On Fri, Feb 19, 2021 at 8:49 PM Casey Schaufler > > wrote: > >> On 2/19/2021 3:28 PM, Paul Moore wrote: > >>> As discussed briefly on the list (lore link below), we are a little > >>> sloppy

Re: [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants

2021-03-03 Thread Paul Moore
On Sun, Feb 21, 2021 at 7:51 AM John Johansen wrote: > On 2/19/21 3:29 PM, Paul Moore wrote: > > Of the three LSMs that implement the security_task_getsecid() LSM > > hook, all three LSMs provide the task's objective security > > credentials. This turns out to be unfortunate as most of the

Re: Audit ipset changes?

2021-03-03 Thread Andreas Hasenack
Hello, On Sat, Feb 27, 2021 at 6:19 PM Richard Guy Briggs wrote: > On 2021-02-26 15:21, Andreas Hasenack wrote: > Issue ghak124 (https://github.com/linux-audit/audit-kernel/issues/124) > introduced auditing for nftables modifications. It turns out it was far > too verbose but may have listed