From: Richard Guy Briggs <rgb-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org> To: containers-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org, linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, linux-audit-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org Cc: linux-api-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, pmoore-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org, eparis-FjpueFixGhCM4zKIHC2jIg@public.gmane.org, sgrubb-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org, zohar-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8@public.gmane.org, ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org Subject: [PATCH V6 10/10] audit: emit AUDIT_NS_INFO record with AUDIT_VIRT_CONTROL record Date: Fri, 17 Apr 2015 03:35:57 -0400 [thread overview] Message-ID: <6d1846744df4efe1c62a22283150d9c9ca1c2412.1429252659.git.rgb@redhat.com> (raw) In-Reply-To: <cover.1429252659.git.rgb-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org> In-Reply-To: <cover.1429252659.git.rgb-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org> Signed-off-by: Richard Guy Briggs <rgb-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org> --- include/uapi/linux/audit.h | 2 ++ kernel/audit.c | 2 ++ 2 files changed, 4 insertions(+), 0 deletions(-) diff --git a/include/uapi/linux/audit.h b/include/uapi/linux/audit.h index 567b45f..b6a55fe 100644 --- a/include/uapi/linux/audit.h +++ b/include/uapi/linux/audit.h @@ -163,6 +163,8 @@ #define AUDIT_KERNEL 2000 /* Asynchronous audit record. NOT A REQUEST. */ +#define AUDIT_VIRT_CONTROL 2500 /* Start, Pause, Stop VM */ + /* Rule flags */ #define AUDIT_FILTER_USER 0x00 /* Apply rule to user-generated messages */ #define AUDIT_FILTER_TASK 0x01 /* Apply rule at task creation (not syscall) */ diff --git a/kernel/audit.c b/kernel/audit.c index a7b1b61..8a01d88 100644 --- a/kernel/audit.c +++ b/kernel/audit.c @@ -943,6 +943,8 @@ static int audit_receive_msg(struct sk_buff *skb, struct nlmsghdr *nlh) } audit_set_portid(ab, NETLINK_CB(skb).portid); audit_log_end(ab); + if (msg_type == AUDIT_VIRT_CONTROL) + audit_log_ns_info(NULL); mutex_lock(&audit_cmd_mutex); } break; -- 1.7.1
WARNING: multiple messages have this Message-ID (diff)
From: Richard Guy Briggs <rgb@redhat.com> To: containers@lists.linux-foundation.org, linux-kernel@vger.kernel.org, linux-audit@redhat.com Cc: Richard Guy Briggs <rgb@redhat.com>, sgrubb@redhat.com, eparis@parisplace.org, pmoore@redhat.com, arozansk@redhat.com, ebiederm@xmission.com, serge@hallyn.com, zohar@linux.vnet.ibm.com, linux-api@vger.kernel.org Subject: [PATCH V6 10/10] audit: emit AUDIT_NS_INFO record with AUDIT_VIRT_CONTROL record Date: Fri, 17 Apr 2015 03:35:57 -0400 [thread overview] Message-ID: <6d1846744df4efe1c62a22283150d9c9ca1c2412.1429252659.git.rgb@redhat.com> (raw) In-Reply-To: <cover.1429252659.git.rgb@redhat.com> In-Reply-To: <cover.1429252659.git.rgb@redhat.com> Signed-off-by: Richard Guy Briggs <rgb@redhat.com> --- include/uapi/linux/audit.h | 2 ++ kernel/audit.c | 2 ++ 2 files changed, 4 insertions(+), 0 deletions(-) diff --git a/include/uapi/linux/audit.h b/include/uapi/linux/audit.h index 567b45f..b6a55fe 100644 --- a/include/uapi/linux/audit.h +++ b/include/uapi/linux/audit.h @@ -163,6 +163,8 @@ #define AUDIT_KERNEL 2000 /* Asynchronous audit record. NOT A REQUEST. */ +#define AUDIT_VIRT_CONTROL 2500 /* Start, Pause, Stop VM */ + /* Rule flags */ #define AUDIT_FILTER_USER 0x00 /* Apply rule to user-generated messages */ #define AUDIT_FILTER_TASK 0x01 /* Apply rule at task creation (not syscall) */ diff --git a/kernel/audit.c b/kernel/audit.c index a7b1b61..8a01d88 100644 --- a/kernel/audit.c +++ b/kernel/audit.c @@ -943,6 +943,8 @@ static int audit_receive_msg(struct sk_buff *skb, struct nlmsghdr *nlh) } audit_set_portid(ab, NETLINK_CB(skb).portid); audit_log_end(ab); + if (msg_type == AUDIT_VIRT_CONTROL) + audit_log_ns_info(NULL); mutex_lock(&audit_cmd_mutex); } break; -- 1.7.1
next prev parent reply other threads:[~2015-04-17 7:35 UTC|newest] Thread overview: 124+ messages / expand[flat|nested] mbox.gz Atom feed top 2015-04-17 7:35 [PATCH V6 00/10] namespaces: log namespaces per task Richard Guy Briggs 2015-04-17 7:35 ` Richard Guy Briggs 2015-04-17 7:35 ` [PATCH V6 08/10] fork: audit on creation of new namespace(s) Richard Guy Briggs [not found] ` <cover.1429252659.git.rgb-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org> 2015-04-17 7:35 ` [PATCH V6 01/10] namespaces: expose ns_entries Richard Guy Briggs 2015-04-17 7:35 ` Richard Guy Briggs 2015-04-17 7:35 ` [PATCH V6 02/10] proc_ns: define PROC_*_INIT_INO in terms of PROC_DYNAMIC_FIRST Richard Guy Briggs 2015-04-17 7:35 ` Richard Guy Briggs 2015-04-17 7:35 ` [PATCH V6 03/10] audit: log namespace ID numbers Richard Guy Briggs 2015-04-17 7:35 ` Richard Guy Briggs 2015-04-17 7:35 ` [PATCH V6 04/10] audit: initialize at subsystem time rather than device time Richard Guy Briggs 2015-04-17 7:35 ` Richard Guy Briggs 2015-04-17 7:35 ` [PATCH V6 05/10] audit: log creation and deletion of namespace instances Richard Guy Briggs 2015-04-17 7:35 ` Richard Guy Briggs [not found] ` <11270b0b1afd0a25b108915673e1e1b38dfeeafa.1429252659.git.rgb-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org> 2015-05-05 14:22 ` Steve Grubb 2015-05-05 14:22 ` Steve Grubb 2015-05-05 14:31 ` Aristeu Rozanski 2015-05-05 14:31 ` Aristeu Rozanski [not found] ` <20150505143119.GA4350-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org> 2015-05-05 14:46 ` Steve Grubb 2015-05-05 14:46 ` Steve Grubb 2015-05-05 14:56 ` Eric W. Biederman 2015-05-05 14:56 ` Eric W. Biederman [not found] ` <87pp6fhy4c.fsf-JOvCrm2gF+uungPnsOpG7nhyD016LWXt@public.gmane.org> 2015-05-05 15:16 ` Steve Grubb 2015-05-05 15:16 ` Steve Grubb 2015-05-12 19:57 ` Richard Guy Briggs 2015-05-12 19:57 ` Richard Guy Briggs [not found] ` <20150512195759.GA9832-bcJWsdo4jJjeVoXN4CMphl7TgLCtbB0G@public.gmane.org> 2015-05-14 14:57 ` Steve Grubb 2015-05-14 14:57 ` Steve Grubb 2015-05-14 14:57 ` Steve Grubb 2015-05-14 15:12 ` LC Bruzenak 2015-05-14 15:42 ` Eric W. Biederman 2015-05-14 15:42 ` Eric W. Biederman [not found] ` <87iobvnp1t.fsf-JOvCrm2gF+uungPnsOpG7nhyD016LWXt@public.gmane.org> 2015-05-14 16:21 ` Steve Grubb 2015-05-14 16:21 ` Steve Grubb 2015-05-14 16:36 ` LC Bruzenak 2015-05-15 2:03 ` Richard Guy Briggs 2015-05-15 2:03 ` Richard Guy Briggs 2015-05-15 2:03 ` Richard Guy Briggs 2015-05-14 15:42 ` Eric W. Biederman 2015-05-14 19:19 ` Paul Moore 2015-05-15 1:31 ` Eric W. Biederman 2015-05-15 1:31 ` Eric W. Biederman 2015-05-15 1:31 ` Eric W. Biederman [not found] ` <87bnhmbp8e.fsf-JOvCrm2gF+uungPnsOpG7nhyD016LWXt@public.gmane.org> 2015-05-15 2:25 ` Richard Guy Briggs 2015-05-15 13:17 ` Steve Grubb 2015-05-15 21:01 ` Paul Moore 2015-05-15 2:25 ` Richard Guy Briggs 2015-05-15 13:17 ` Steve Grubb 2015-05-15 13:17 ` Steve Grubb 2015-05-15 14:51 ` Eric W. Biederman 2015-05-15 14:51 ` Eric W. Biederman 2015-05-15 21:01 ` Paul Moore 2015-05-15 2:32 ` Richard Guy Briggs [not found] ` <20150515023221.GC965-bcJWsdo4jJjeVoXN4CMphl7TgLCtbB0G@public.gmane.org> 2015-05-15 6:23 ` Andy Lutomirski 2015-05-15 6:23 ` Andy Lutomirski 2015-05-15 6:23 ` Andy Lutomirski [not found] ` <CALCETrWzM4+Vs8OVJWBcWJfbR_DRSb+e7SmUyy6CS4sHQaTkRw-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org> 2015-05-15 12:38 ` Steve Grubb 2015-05-15 12:38 ` Steve Grubb 2015-05-15 13:17 ` Andy Lutomirski 2015-05-15 13:17 ` Andy Lutomirski 2015-05-15 21:05 ` Paul Moore 2015-05-15 21:05 ` Paul Moore 2015-05-16 9:46 ` Daniel J Walsh 2015-05-16 9:46 ` Daniel J Walsh 2015-05-16 12:16 ` Paul Moore 2015-05-16 14:46 ` Eric W. Biederman 2015-05-16 14:46 ` Eric W. Biederman 2015-05-16 14:46 ` Eric W. Biederman [not found] ` <87r3qgpol6.fsf-JOvCrm2gF+uungPnsOpG7nhyD016LWXt@public.gmane.org> 2015-05-16 22:49 ` Paul Moore 2015-05-16 22:49 ` Paul Moore 2015-05-16 22:49 ` Paul Moore 2015-05-19 13:09 ` Richard Guy Briggs [not found] ` <20150519130911.GB20131-bcJWsdo4jJjeVoXN4CMphl7TgLCtbB0G@public.gmane.org> 2015-05-19 14:27 ` Paul Moore 2015-05-19 14:27 ` Paul Moore [not found] ` <CAHC9VhQs6pxFC3dvZic5XzuJr1xdJZyPjXdBoipwY3OOkng0ng-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org> 2015-05-19 13:09 ` Richard Guy Briggs [not found] ` <CAHC9VhRKSK9=9qPF3dgALS=x1g3LinNeQvuhNV5TvQ=D7Szuag-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org> 2015-05-16 14:46 ` Eric W. Biederman [not found] ` <555711FA.50703-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org> 2015-05-16 12:16 ` Paul Moore 2015-05-15 2:32 ` Richard Guy Briggs 2015-05-14 19:19 ` Paul Moore 2015-05-15 0:48 ` Richard Guy Briggs 2015-05-15 0:48 ` Richard Guy Briggs 2015-05-15 0:48 ` Richard Guy Briggs 2015-05-15 20:26 ` Paul Moore [not found] ` <20150515004855.GB10526-bcJWsdo4jJjeVoXN4CMphl7TgLCtbB0G@public.gmane.org> 2015-05-15 1:10 ` Oren Laadan 2015-05-15 2:11 ` Richard Guy Briggs 2015-05-15 2:11 ` Richard Guy Briggs [not found] ` <20150515021126.GA965-bcJWsdo4jJjeVoXN4CMphl7TgLCtbB0G@public.gmane.org> 2015-05-15 13:19 ` Daniel J Walsh 2015-05-15 13:19 ` Daniel J Walsh [not found] ` <CAA4jN2bgynVTwF+owtXgq06JMLQJpy_qokpD0mAguNYeDxmh1A-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org> 2015-05-15 2:11 ` Richard Guy Briggs 2015-05-15 20:42 ` Paul Moore 2015-05-15 20:42 ` Paul Moore 2015-05-15 20:42 ` Paul Moore 2015-05-15 20:26 ` Paul Moore 2015-05-12 19:57 ` Richard Guy Briggs 2015-04-17 7:35 ` [PATCH V6 06/10] audit: dump namespace IDs for pid on receipt of AUDIT_NS_INFO Richard Guy Briggs 2015-04-17 7:35 ` Richard Guy Briggs 2015-04-17 7:35 ` [PATCH V6 07/10] sched: add a macro to ref all CLONE_NEW* flags Richard Guy Briggs 2015-04-17 7:35 ` Richard Guy Briggs [not found] ` <cf1ed24f71743ea7f85682f26f3185202a1f8a32.1429252659.git.rgb-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org> 2015-04-17 8:18 ` Peter Zijlstra 2015-04-17 8:18 ` Peter Zijlstra [not found] ` <20150417081843.GE23123-ndre7Fmf5hadTX5a5knrm8zTDFooKrT+cvkQGrU6aU0@public.gmane.org> 2015-04-17 15:42 ` Richard Guy Briggs 2015-04-17 15:42 ` Richard Guy Briggs [not found] ` <20150417154250.GA26233-bcJWsdo4jJjeVoXN4CMphl7TgLCtbB0G@public.gmane.org> 2015-04-17 17:41 ` Peter Zijlstra 2015-04-17 17:41 ` Peter Zijlstra [not found] ` <20150417174131.GL23123-ndre7Fmf5hadTX5a5knrm8zTDFooKrT+cvkQGrU6aU0@public.gmane.org> 2015-04-17 22:00 ` Richard Guy Briggs 2015-04-17 22:00 ` Richard Guy Briggs 2015-04-17 7:35 ` [PATCH V6 08/10] fork: audit on creation of new namespace(s) Richard Guy Briggs 2015-04-17 7:35 ` [PATCH V6 09/10] audit: log on switching namespace (setns) Richard Guy Briggs 2015-04-17 7:35 ` Richard Guy Briggs 2015-04-17 7:35 ` Richard Guy Briggs [this message] 2015-04-17 7:35 ` [PATCH V6 10/10] audit: emit AUDIT_NS_INFO record with AUDIT_VIRT_CONTROL record Richard Guy Briggs 2015-04-21 4:33 ` [PATCH V6 00/10] namespaces: log namespaces per task Eric W. Biederman 2015-04-21 4:33 ` Eric W. Biederman [not found] ` <87vbgqw163.fsf-JOvCrm2gF+uungPnsOpG7nhyD016LWXt@public.gmane.org> 2015-04-23 3:07 ` Richard Guy Briggs 2015-04-23 3:07 ` Richard Guy Briggs 2015-04-23 20:44 ` Richard Guy Briggs [not found] ` <20150423204429.GA25794-bcJWsdo4jJjeVoXN4CMphl7TgLCtbB0G@public.gmane.org> 2015-04-24 19:36 ` Eric W. Biederman 2015-04-24 19:36 ` Eric W. Biederman [not found] ` <87bnid9v4f.fsf-JOvCrm2gF+uungPnsOpG7nhyD016LWXt@public.gmane.org> 2015-04-28 2:05 ` Richard Guy Briggs 2015-04-28 2:05 ` Richard Guy Briggs [not found] ` <20150428020555.GB20713-bcJWsdo4jJjeVoXN4CMphl7TgLCtbB0G@public.gmane.org> 2015-04-28 2:16 ` Eric W. Biederman 2015-04-28 2:16 ` Eric W. Biederman 2015-05-08 14:42 ` Richard Guy Briggs [not found] ` <87zj5tgfpb.fsf-JOvCrm2gF+uungPnsOpG7nhyD016LWXt@public.gmane.org> 2015-05-08 14:42 ` Richard Guy Briggs [not found] ` <20150423030751.GA6712-bcJWsdo4jJjeVoXN4CMphl7TgLCtbB0G@public.gmane.org> 2015-04-23 20:44 ` Richard Guy Briggs
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=6d1846744df4efe1c62a22283150d9c9ca1c2412.1429252659.git.rgb@redhat.com \ --to=rgb-h+wxahxf7alqt0dzr+alfa@public.gmane.org \ --cc=containers-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org \ --cc=ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org \ --cc=eparis-FjpueFixGhCM4zKIHC2jIg@public.gmane.org \ --cc=linux-api-u79uwXL29TY76Z2rM5mHXA@public.gmane.org \ --cc=linux-audit-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org \ --cc=linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org \ --cc=pmoore-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org \ --cc=sgrubb-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org \ --cc=zohar-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8@public.gmane.org \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: linkBe sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.