* [PATCH] field-dictionary: add ioctlcmd
@ 2016-07-15 19:55 ` william.c.roberts-ral2JQCrhuEAvxtiuMwx3w
0 siblings, 0 replies; 4+ messages in thread
From: william.c.roberts @ 2016-07-15 19:55 UTC (permalink / raw)
To: sgrubb, linux-audit; +Cc: selinux, seandroid-list, William Roberts
From: William Roberts <william.c.roberts@intel.com>
Per-request ioctlcmd controls were added to SE Linux, however
the audit field dictionary was not updated.
This patch updates that dictionary.
Signed-off-by: William Roberts <william.c.roberts@intel.com>
---
specs/fields/field-dictionary.csv | 1 +
1 file changed, 1 insertion(+)
diff --git a/specs/fields/field-dictionary.csv b/specs/fields/field-dictionary.csv
index a645085..5a922e5 100644
--- a/specs/fields/field-dictionary.csv
+++ b/specs/fields/field-dictionary.csv
@@ -82,6 +82,7 @@ inode,numeric,inode number,
inode_gid,numeric,group id of the inode's owner,
inode_uid,numeric,user id of the inode's owner,
invalid_context,encoded,SELinux context,
+ioctlcmd,numeric,The request argument to the ioctl syscall,
ipx-net,numeric,IPX network number,
item,numeric,which item is being recorded,
items,numeric,the number of path records in the event,
--
1.9.1
^ permalink raw reply related [flat|nested] 4+ messages in thread
* [PATCH] field-dictionary: add ioctlcmd
@ 2016-07-15 19:55 ` william.c.roberts-ral2JQCrhuEAvxtiuMwx3w
0 siblings, 0 replies; 4+ messages in thread
From: william.c.roberts-ral2JQCrhuEAvxtiuMwx3w @ 2016-07-15 19:55 UTC (permalink / raw)
To: sgrubb-H+wXaHxf7aLQT0dZR+AlfA, linux-audit-H+wXaHxf7aLQT0dZR+AlfA
Cc: seandroid-list-+05T5uksL2qpZYMLLGbcSA, selinux-+05T5uksL2qpZYMLLGbcSA
From: William Roberts <william.c.roberts-ral2JQCrhuEAvxtiuMwx3w@public.gmane.org>
Per-request ioctlcmd controls were added to SE Linux, however
the audit field dictionary was not updated.
This patch updates that dictionary.
Signed-off-by: William Roberts <william.c.roberts-ral2JQCrhuEAvxtiuMwx3w@public.gmane.org>
---
specs/fields/field-dictionary.csv | 1 +
1 file changed, 1 insertion(+)
diff --git a/specs/fields/field-dictionary.csv b/specs/fields/field-dictionary.csv
index a645085..5a922e5 100644
--- a/specs/fields/field-dictionary.csv
+++ b/specs/fields/field-dictionary.csv
@@ -82,6 +82,7 @@ inode,numeric,inode number,
inode_gid,numeric,group id of the inode's owner,
inode_uid,numeric,user id of the inode's owner,
invalid_context,encoded,SELinux context,
+ioctlcmd,numeric,The request argument to the ioctl syscall,
ipx-net,numeric,IPX network number,
item,numeric,which item is being recorded,
items,numeric,the number of path records in the event,
--
1.9.1
_______________________________________________
Selinux mailing list
Selinux-+05T5uksL2qpZYMLLGbcSA@public.gmane.org
To unsubscribe, send email to Selinux-leave-+05T5uksL2pAGbPMOrvdOA@public.gmane.org
To get help, send an email containing "help" to Selinux-request-+05T5uksL2pAGbPMOrvdOA@public.gmane.org
^ permalink raw reply related [flat|nested] 4+ messages in thread
* Re: [PATCH] field-dictionary: add ioctlcmd
2016-07-15 19:55 ` william.c.roberts-ral2JQCrhuEAvxtiuMwx3w
@ 2016-07-17 13:19 ` Paul Moore
-1 siblings, 0 replies; 4+ messages in thread
From: Paul Moore @ 2016-07-17 13:19 UTC (permalink / raw)
To: william.c.roberts; +Cc: sgrubb, linux-audit, seandroid-list, selinux
On Fri, Jul 15, 2016 at 3:55 PM, <william.c.roberts@intel.com> wrote:
> From: William Roberts <william.c.roberts@intel.com>
>
> Per-request ioctlcmd controls were added to SE Linux, however
> the audit field dictionary was not updated.
>
> This patch updates that dictionary.
>
> Signed-off-by: William Roberts <william.c.roberts@intel.com>
> ---
> specs/fields/field-dictionary.csv | 1 +
> 1 file changed, 1 insertion(+)
Applied, thanks!
> diff --git a/specs/fields/field-dictionary.csv b/specs/fields/field-dictionary.csv
> index a645085..5a922e5 100644
> --- a/specs/fields/field-dictionary.csv
> +++ b/specs/fields/field-dictionary.csv
> @@ -82,6 +82,7 @@ inode,numeric,inode number,
> inode_gid,numeric,group id of the inode's owner,
> inode_uid,numeric,user id of the inode's owner,
> invalid_context,encoded,SELinux context,
> +ioctlcmd,numeric,The request argument to the ioctl syscall,
> ipx-net,numeric,IPX network number,
> item,numeric,which item is being recorded,
> items,numeric,the number of path records in the event,
> --
> 1.9.1
--
paul moore
www.paul-moore.com
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [PATCH] field-dictionary: add ioctlcmd
@ 2016-07-17 13:19 ` Paul Moore
0 siblings, 0 replies; 4+ messages in thread
From: Paul Moore @ 2016-07-17 13:19 UTC (permalink / raw)
To: william.c.roberts; +Cc: seandroid-list, selinux, linux-audit
On Fri, Jul 15, 2016 at 3:55 PM, <william.c.roberts@intel.com> wrote:
> From: William Roberts <william.c.roberts@intel.com>
>
> Per-request ioctlcmd controls were added to SE Linux, however
> the audit field dictionary was not updated.
>
> This patch updates that dictionary.
>
> Signed-off-by: William Roberts <william.c.roberts@intel.com>
> ---
> specs/fields/field-dictionary.csv | 1 +
> 1 file changed, 1 insertion(+)
Applied, thanks!
> diff --git a/specs/fields/field-dictionary.csv b/specs/fields/field-dictionary.csv
> index a645085..5a922e5 100644
> --- a/specs/fields/field-dictionary.csv
> +++ b/specs/fields/field-dictionary.csv
> @@ -82,6 +82,7 @@ inode,numeric,inode number,
> inode_gid,numeric,group id of the inode's owner,
> inode_uid,numeric,user id of the inode's owner,
> invalid_context,encoded,SELinux context,
> +ioctlcmd,numeric,The request argument to the ioctl syscall,
> ipx-net,numeric,IPX network number,
> item,numeric,which item is being recorded,
> items,numeric,the number of path records in the event,
> --
> 1.9.1
--
paul moore
www.paul-moore.com
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2016-07-17 13:20 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-07-15 19:55 [PATCH] field-dictionary: add ioctlcmd william.c.roberts
2016-07-15 19:55 ` william.c.roberts-ral2JQCrhuEAvxtiuMwx3w
2016-07-17 13:19 ` Paul Moore
2016-07-17 13:19 ` Paul Moore
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.