Re: [RFC PATCH ghak90 (was ghak32) V3 07/10] audit: add support for containerid to network namespaces

2018-07-26 Thread Richard Guy Briggs
On 2018-07-24 16:33, Paul Moore wrote: > On Tue, Jul 24, 2018 at 10:06 AM Richard Guy Briggs wrote: > > On 2018-07-20 18:14, Paul Moore wrote: > > > On Wed, Jun 6, 2018 at 1:03 PM Richard Guy Briggs wrote: > > > > Audit events could happen in a network namespace outside of a task > > > > context

Re: [RFC PATCH ghak90 (was ghak32) V3 07/10] audit: add support for containerid to network namespaces

2018-07-24 Thread Paul Moore
On Tue, Jul 24, 2018 at 10:06 AM Richard Guy Briggs wrote: > On 2018-07-20 18:14, Paul Moore wrote: > > On Wed, Jun 6, 2018 at 1:03 PM Richard Guy Briggs wrote: > > > Audit events could happen in a network namespace outside of a task > > > context due to packets received from the net that trigger

Re: [RFC PATCH ghak90 (was ghak32) V3 07/10] audit: add support for containerid to network namespaces

2018-07-24 Thread Richard Guy Briggs
On 2018-07-20 18:14, Paul Moore wrote: > On Wed, Jun 6, 2018 at 1:03 PM Richard Guy Briggs wrote: > > Audit events could happen in a network namespace outside of a task > > context due to packets received from the net that trigger an auditing > > rule prior to being associated with a running task.

Re: [RFC PATCH ghak90 (was ghak32) V3 07/10] audit: add support for containerid to network namespaces

2018-07-20 Thread Paul Moore
On Wed, Jun 6, 2018 at 1:03 PM Richard Guy Briggs wrote: > Audit events could happen in a network namespace outside of a task > context due to packets received from the net that trigger an auditing > rule prior to being associated with a running task. The network > namespace could in use by multi

[RFC PATCH ghak90 (was ghak32) V3 07/10] audit: add support for containerid to network namespaces

2018-06-06 Thread Richard Guy Briggs
Audit events could happen in a network namespace outside of a task context due to packets received from the net that trigger an auditing rule prior to being associated with a running task. The network namespace could in use by multiple containers by association to the tasks in that network namespa