Re: [PATCH ghak90 V6] fixup! audit: add containerid filtering

2019-06-04 Thread Paul Moore
On Tue, Jun 4, 2019 at 3:55 AM Daniel Walsh wrote: > The need for nested container support is the `Enemy of the good`. This > idea has been being worked on for years and has always been blocked by > this seldom used feature. Speaking with some of the LXC folks, nested orchestrators isn't a

Re: [PATCH ghak90 V6] fixup! audit: add containerid filtering

2019-06-04 Thread Daniel Walsh
The need for nested container support is the `Enemy of the good`.  This idea has been being worked on for years and has always been blocked by this seldom used feature. We are working on a project right this summer to allow us to use the audit system to track the syscalls used by a container and

Re: [PATCH ghak90 V6] fixup! audit: add containerid filtering

2019-06-03 Thread Paul Moore
On Fri, May 31, 2019 at 1:54 PM Richard Guy Briggs wrote: > > Remove the BUG() call since we will never have an invalid op value as > audit_data_to_entry()/audit_to_op() ensure that the op value is a a > known good value. > > Signed-off-by: Richard Guy Briggs > --- > kernel/auditfilter.c | 1 -

[PATCH ghak90 V6] fixup! audit: add containerid filtering

2019-05-31 Thread Richard Guy Briggs
Remove the BUG() call since we will never have an invalid op value as audit_data_to_entry()/audit_to_op() ensure that the op value is a a known good value. Signed-off-by: Richard Guy Briggs --- kernel/auditfilter.c | 1 - 1 file changed, 1 deletion(-) diff --git a/kernel/auditfilter.c