[PATCH 0/2] audit: add documentation for /proc/PID/stable interfaces

2021-03-11 Thread Richard Guy Briggs
Add Documentation/ABI entries for audit interfaces in /proc/PID/ that have been stable for more than a decade. Richard Guy Briggs (2): audit: document /proc/PID/loginuid audit: document /proc/PID/sessionid .../ABI/stable/procfs-audit_loginuid | 27 +++ 1 file

[PATCH 1/2] audit: document /proc/PID/loginuid

2021-03-11 Thread Richard Guy Briggs
Describe the /proc/PID/loginuid interface in Documentation/ABI/stable that was added 2005-02-01 by commit 1e2d1492e178 ("[PATCH] audit: handle loginuid through proc") Signed-off-by: Richard Guy Briggs --- Documentation/ABI/stable/procfs-audit_loginuid | 15 +++ 1 file changed, 15

[PATCH 2/2] audit: document /proc/PID/sessionid

2021-03-11 Thread Richard Guy Briggs
Describe the /proc/PID/loginuid interface in Documentation/ABI/stable that was added 2008-03-13 in commit 1e0bd7550ea9 ("[PATCH] export sessionid alongside the loginuid in procfs") Signed-off-by: Richard Guy Briggs --- Documentation/ABI/stable/procfs-audit_loginuid | 12 1 file

[PATCH] MAINTAINERS: update audit files

2021-03-11 Thread Richard Guy Briggs
Add files maintaned by the audit subsystem. Signed-off-by: Richard Guy Briggs --- MAINTAINERS | 4 1 file changed, 4 insertions(+) diff --git a/MAINTAINERS b/MAINTAINERS index 6eff4f720c72..a17532559665 100644 --- a/MAINTAINERS +++ b/MAINTAINERS @@ -3015,9 +3015,13 @@ L:

[PATCH] audit: further cleanup of AUDIT_FILTER_ENTRY deprecation

2021-03-11 Thread Richard Guy Briggs
Remove the list parameter from the function call since the exit filter list is the only remaining list used by this function. This cleans up commit 5260ecc2e048 ("audit: deprecate the AUDIT_FILTER_ENTRY filter") Signed-off-by: Richard Guy Briggs --- kernel/auditsc.c | 11 --- 1 file

Re: renameat2 syscall is not recorded

2021-03-11 Thread Alan Evangelista
AE> Is there any reason why (...) auditctl -R don't print errors to stdout when rules parsing errors occur? SG> If it's detected that the rules are in a file, they get sent to syslog because > 99.99% of the time, this is system boot or initscripts and we need to make > the problem