Re: [PATCH ghak90 V8 11/16] audit: add support for containerid to network namespaces

2020-02-05 Thread Paul Moore
On Tue, Feb 4, 2020 at 6:43 PM Richard Guy Briggs wrote: > On 2020-01-22 16:28, Paul Moore wrote: > > On Tue, Dec 31, 2019 at 2:51 PM Richard Guy Briggs wrote: > > > > > > This also adds support to qualify NETFILTER_PKT records. > > > > > > Audit events could happen in a network namespace outside

Re: [PATCH ghak90 V8 11/16] audit: add support for containerid to network namespaces

2020-02-04 Thread Richard Guy Briggs
On 2020-01-22 16:28, Paul Moore wrote: > On Tue, Dec 31, 2019 at 2:51 PM Richard Guy Briggs wrote: > > > > This also adds support to qualify NETFILTER_PKT records. > > > > Audit events could happen in a network namespace outside of a task > > context due to packets received from the net that trigg

Re: [PATCH ghak90 V8 11/16] audit: add support for containerid to network namespaces

2020-01-22 Thread Paul Moore
On Tue, Dec 31, 2019 at 2:51 PM Richard Guy Briggs wrote: > > This also adds support to qualify NETFILTER_PKT records. > > Audit events could happen in a network namespace outside of a task > context due to packets received from the net that trigger an auditing > rule prior to being associated wit

[PATCH ghak90 V8 11/16] audit: add support for containerid to network namespaces

2019-12-31 Thread Richard Guy Briggs
This also adds support to qualify NETFILTER_PKT records. Audit events could happen in a network namespace outside of a task context due to packets received from the net that trigger an auditing rule prior to being associated with a running task. The network namespace could be in use by multiple c