Re: [PATCH V5 0/5] audit by executable name

2015-05-29 Thread Richard Guy Briggs
On 15/05/29, Peter Moody wrote: Did this [1] land? I'm guessing no because the next pull request from Eric Paris didn't include it and I don't see it referenced in any of Paul's pull requests. Finally (most tellingly), I don't see anything in Linus' tree. Why? Were your ears burning? ;-)

Re: [PATCH V5 0/5] audit by executable name

2015-05-29 Thread Paul Moore
On Fri, May 29, 2015 at 12:14 PM, Peter Moody pe...@hda3.com wrote: Did this [1] land? I'm guessing no because the next pull request from Eric Paris didn't include it and I don't see it referenced in any of Paul's pull requests. Finally (most tellingly), I don't see anything in Linus' tree.

Re: [PATCH V5 0/5] audit by executable name

2014-10-29 Thread Richard Guy Briggs
On 14/10/21, Paul Moore wrote: On Tuesday, October 21, 2014 06:19:52 PM Eric Paris wrote: On Tue, 2014-10-21 at 17:56 -0400, Paul Moore wrote: * Change the audit_status.version field comment in include/uapi/linux/audit.h to /* audit functionality bitmap */, or similar. We can't really

Re: [PATCH V5 0/5] audit by executable name

2014-10-29 Thread Steve Grubb
On Wednesday, October 29, 2014 03:48:40 PM Richard Guy Briggs wrote: On 14/10/21, Paul Moore wrote: Can anyone think of anything else that might be affected by this? No one uses this stuff, just change it. Yes, but I feel like I need to at least ask the question; how much

Re: [PATCH V5 0/5] audit by executable name

2014-10-29 Thread Richard Guy Briggs
On 14/10/29, Steve Grubb wrote: On Wednesday, October 29, 2014 03:48:40 PM Richard Guy Briggs wrote: On 14/10/21, Paul Moore wrote: Can anyone think of anything else that might be affected by this? No one uses this stuff, just change it. Yes, but I feel like I need to at

Re: [PATCH V5 0/5] audit by executable name

2014-10-29 Thread Eric Paris
On Wed, 2014-10-29 at 17:54 -0400, Richard Guy Briggs wrote: On 14/10/29, Steve Grubb wrote: On Wednesday, October 29, 2014 03:48:40 PM Richard Guy Briggs wrote: On 14/10/21, Paul Moore wrote: Can anyone think of anything else that might be affected by this? No one uses this

Re: [PATCH V5 0/5] audit by executable name

2014-10-29 Thread Richard Guy Briggs
On 14/10/29, Eric Paris wrote: On Wed, 2014-10-29 at 17:54 -0400, Richard Guy Briggs wrote: On 14/10/29, Steve Grubb wrote: On Wednesday, October 29, 2014 03:48:40 PM Richard Guy Briggs wrote: On 14/10/21, Paul Moore wrote: Can anyone think of anything else that might be affected

Re: [PATCH V5 0/5] audit by executable name

2014-10-21 Thread Paul Moore
On Monday, October 20, 2014 07:33:39 PM Steve Grubb wrote: On Monday, October 20, 2014 07:02:33 PM Paul Moore wrote: On Monday, October 20, 2014 06:47:27 PM Eric Paris wrote: On Mon, 2014-10-20 at 16:25 -0400, Steve Grubb wrote: On Thursday, October 02, 2014 11:06:51 PM Richard Guy

Re: [PATCH V5 0/5] audit by executable name

2014-10-21 Thread Steve Grubb
On Tuesday, October 21, 2014 05:56:36 PM Paul Moore wrote: On Monday, October 20, 2014 07:33:39 PM Steve Grubb wrote: On Monday, October 20, 2014 07:02:33 PM Paul Moore wrote: On Monday, October 20, 2014 06:47:27 PM Eric Paris wrote: On Mon, 2014-10-20 at 16:25 -0400, Steve Grubb wrote:

Re: [PATCH V5 0/5] audit by executable name

2014-10-21 Thread Eric Paris
On Tue, 2014-10-21 at 17:56 -0400, Paul Moore wrote: * Change the audit_status.version field comment in include/uapi/linux/audit.h to /* audit functionality bitmap */, or similar. We can't really change the structure now, but the comment is fair game. Trying to think how to do things

Re: [PATCH V5 0/5] audit by executable name

2014-10-21 Thread Paul Moore
On Tuesday, October 21, 2014 06:19:52 PM Eric Paris wrote: On Tue, 2014-10-21 at 17:56 -0400, Paul Moore wrote: * Change the audit_status.version field comment in include/uapi/linux/audit.h to /* audit functionality bitmap */, or similar. We can't really change the structure now, but the

Re: [PATCH V5 0/5] audit by executable name

2014-10-20 Thread Steve Grubb
On Thursday, October 02, 2014 11:06:51 PM Richard Guy Briggs wrote: This is a part of Peter Moody, my and Eric Paris' work to implement audit by executable name. Does this patch set define an AUDIT_VERSION_SOMETHING and then set AUDIT_VERSION_LATEST to it? If not, I need one to tell if the

Re: [PATCH V5 0/5] audit by executable name

2014-10-20 Thread Eric Paris
On Mon, 2014-10-20 at 16:25 -0400, Steve Grubb wrote: On Thursday, October 02, 2014 11:06:51 PM Richard Guy Briggs wrote: This is a part of Peter Moody, my and Eric Paris' work to implement audit by executable name. Does this patch set define an AUDIT_VERSION_SOMETHING and then set

Re: [PATCH V5 0/5] audit by executable name

2014-10-20 Thread Paul Moore
On Monday, October 20, 2014 06:47:27 PM Eric Paris wrote: On Mon, 2014-10-20 at 16:25 -0400, Steve Grubb wrote: On Thursday, October 02, 2014 11:06:51 PM Richard Guy Briggs wrote: This is a part of Peter Moody, my and Eric Paris' work to implement audit by executable name. Does this

Re: [PATCH V5 0/5] audit by executable name

2014-10-20 Thread Steve Grubb
On Monday, October 20, 2014 07:33:39 PM Steve Grubb wrote: On Monday, October 20, 2014 07:02:33 PM Paul Moore wrote: On Monday, October 20, 2014 06:47:27 PM Eric Paris wrote: On Mon, 2014-10-20 at 16:25 -0400, Steve Grubb wrote: On Thursday, October 02, 2014 11:06:51 PM Richard Guy

[PATCH V5 0/5] audit by executable name

2014-10-02 Thread Richard Guy Briggs
This is a part of Peter Moody, my and Eric Paris' work to implement audit by executable name. Please see the accompanying userspace patch: https://www.redhat.com/archives/linux-audit/2014-May/msg00019.html The userspace interface is not expected to change appreciably unless something