Re: [PATCH V4 (was V6)] audit: use macros for unset inode and device values

2015-08-07 Thread Paul Moore
On Thursday, August 06, 2015 02:31:57 PM Casey Schaufler wrote: > I remember the Orange Book days when we were *required* to audit by > dev/inode because it was the only true way to identify the object. Yes, > it's analogous to auditing the pid, but we had to audit by that, too. The > dev/indode an

Re: [PATCH V4 (was V6)] audit: use macros for unset inode and device values

2015-08-06 Thread Casey Schaufler
On 8/5/2015 1:08 PM, Steve Grubb wrote: > On Wednesday, August 05, 2015 03:16:58 PM Paul Moore wrote: >> On Wednesday, August 05, 2015 02:30:14 AM Richard Guy Briggs wrote: >>> On 15/08/04, Paul Moore wrote: On Saturday, August 01, 2015 03:42:23 PM Richard Guy Briggs wrote: > Signed-off-by

Re: [PATCH V4 (was V6)] audit: use macros for unset inode and device values

2015-08-05 Thread Paul Moore
On Wed, Aug 5, 2015 at 3:38 PM, Richard Guy Briggs wrote: > On 15/08/05, William Roberts wrote: >> On Aug 1, 2015 12:44 PM, "Richard Guy Briggs" wrote: >> > >> > Signed-off-by: Richard Guy Briggs >> > --- >> > include/uapi/linux/audit.h |2 ++ >> > kernel/audit.c |2 +- >> >

Re: [PATCH V4 (was V6)] audit: use macros for unset inode and device values

2015-08-05 Thread Steve Grubb
On Wednesday, August 05, 2015 03:16:58 PM Paul Moore wrote: > On Wednesday, August 05, 2015 02:30:14 AM Richard Guy Briggs wrote: > > On 15/08/04, Paul Moore wrote: > > > On Saturday, August 01, 2015 03:42:23 PM Richard Guy Briggs wrote: > > > > Signed-off-by: Richard Guy Briggs > > > > --- > > >

Re: [PATCH V4 (was V6)] audit: use macros for unset inode and device values

2015-08-05 Thread Richard Guy Briggs
On 15/08/05, William Roberts wrote: > On Aug 1, 2015 12:44 PM, "Richard Guy Briggs" wrote: > > > > Signed-off-by: Richard Guy Briggs > > --- > > include/uapi/linux/audit.h |2 ++ > > kernel/audit.c |2 +- > > kernel/audit_watch.c |8 > > kernel/auditsc.c

Re: [PATCH V4 (was V6)] audit: use macros for unset inode and device values

2015-08-05 Thread William Roberts
On Aug 1, 2015 12:44 PM, "Richard Guy Briggs" wrote: > > Signed-off-by: Richard Guy Briggs > --- > include/uapi/linux/audit.h |2 ++ > kernel/audit.c |2 +- > kernel/audit_watch.c |8 > kernel/auditsc.c |6 +++--- > 4 files changed, 10 inserti

Re: [PATCH V4 (was V6)] audit: use macros for unset inode and device values

2015-08-05 Thread Paul Moore
On Wednesday, August 05, 2015 02:30:14 AM Richard Guy Briggs wrote: > On 15/08/04, Paul Moore wrote: > > On Saturday, August 01, 2015 03:42:23 PM Richard Guy Briggs wrote: > > > Signed-off-by: Richard Guy Briggs > > > --- > > > > > > include/uapi/linux/audit.h |2 ++ > > > kernel/audit.c

Re: [PATCH V4 (was V6)] audit: use macros for unset inode and device values

2015-08-04 Thread Richard Guy Briggs
On 15/08/04, Paul Moore wrote: > On Saturday, August 01, 2015 03:42:23 PM Richard Guy Briggs wrote: > > Signed-off-by: Richard Guy Briggs > > --- > > include/uapi/linux/audit.h |2 ++ > > kernel/audit.c |2 +- > > kernel/audit_watch.c |8 > > kernel/auditsc.

Re: [PATCH V4 (was V6)] audit: use macros for unset inode and device values

2015-08-04 Thread Paul Moore
On Saturday, August 01, 2015 03:42:23 PM Richard Guy Briggs wrote: > Signed-off-by: Richard Guy Briggs > --- > include/uapi/linux/audit.h |2 ++ > kernel/audit.c |2 +- > kernel/audit_watch.c |8 > kernel/auditsc.c |6 +++--- > 4 files changed,

[PATCH V4 (was V6)] audit: use macros for unset inode and device values

2015-08-01 Thread Richard Guy Briggs
Signed-off-by: Richard Guy Briggs --- include/uapi/linux/audit.h |2 ++ kernel/audit.c |2 +- kernel/audit_watch.c |8 kernel/auditsc.c |6 +++--- 4 files changed, 10 insertions(+), 8 deletions(-) diff --git a/include/uapi/linux/audit.h b/incl