Re: [PATCH v5 3/3] fanotify, audit: Allow audit to use the full permission event response

2023-01-10 Thread Richard Guy Briggs
On 2023-01-10 10:26, Steve Grubb wrote: > Hello Richard, > > On Monday, January 9, 2023 10:08:04 PM EST Richard Guy Briggs wrote: > > When I use an application that expected the old API, meaning it simply > > does: > > > > > > response.fd = metadata->fd; > > > response.response = reply; > > > clo

Re: [PATCH v5 3/3] fanotify, audit: Allow audit to use the full permission event response

2023-01-10 Thread Steve Grubb
Hello Richard, On Monday, January 9, 2023 10:08:04 PM EST Richard Guy Briggs wrote: > When I use an application that expected the old API, meaning it simply > does: > > > > response.fd = metadata->fd; > > response.response = reply; > > close(metadata->fd); > > write(fd, &response, sizeof(struct f

Re: [PATCH v5 3/3] fanotify,audit: Allow audit to use the full permission event response

2023-01-09 Thread Richard Guy Briggs
On 2023-01-09 19:06, Steve Grubb wrote: > Hello, > > Sorry to take so long. Holidays and kernel build problems. However, I have > built a kernel with these patches. I only have 2 comments. When I use an > application that expected the old API, meaning it simply does: > > response.fd = m

Re: [PATCH v5 3/3] fanotify, audit: Allow audit to use the full permission event response

2023-01-09 Thread Steve Grubb
Hello, Sorry to take so long. Holidays and kernel build problems. However, I have built a kernel with these patches. I only have 2 comments. When I use an application that expected the old API, meaning it simply does: response.fd = metadata->fd; response.response = reply;

Re: [PATCH v5 3/3] fanotify,audit: Allow audit to use the full permission event response

2022-12-22 Thread Paul Moore
On Thu, Dec 22, 2022 at 3:42 PM Richard Guy Briggs wrote: > On 2022-12-20 18:31, Paul Moore wrote: > > On Mon, Dec 12, 2022 at 9:06 AM Richard Guy Briggs wrote: > > > > > > This patch passes the full response so that the audit function can use all > > > of it. The audit function was updated to lo

Re: [PATCH v5 3/3] fanotify,audit: Allow audit to use the full permission event response

2022-12-22 Thread Richard Guy Briggs
On 2022-12-20 18:31, Paul Moore wrote: > On Mon, Dec 12, 2022 at 9:06 AM Richard Guy Briggs wrote: > > > > This patch passes the full response so that the audit function can use all > > of it. The audit function was updated to log the additional information in > > the AUDIT_FANOTIFY record. > > >

Re: [PATCH v5 3/3] fanotify,audit: Allow audit to use the full permission event response

2022-12-20 Thread Paul Moore
On Mon, Dec 12, 2022 at 9:06 AM Richard Guy Briggs wrote: > > This patch passes the full response so that the audit function can use all > of it. The audit function was updated to log the additional information in > the AUDIT_FANOTIFY record. > > Currently the only type of fanotify info that is de

[PATCH v5 3/3] fanotify, audit: Allow audit to use the full permission event response

2022-12-12 Thread Richard Guy Briggs
This patch passes the full response so that the audit function can use all of it. The audit function was updated to log the additional information in the AUDIT_FANOTIFY record. Currently the only type of fanotify info that is defined is an audit rule number, but convert it to hex encoding to futur