From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.8 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 91C29C10DCE for ; Fri, 13 Mar 2020 16:49:36 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 68D6C206B7 for ; Fri, 13 Mar 2020 16:49:36 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=paul-moore-com.20150623.gappssmtp.com header.i=@paul-moore-com.20150623.gappssmtp.com header.b="WoJn/P9W" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726406AbgCMQtf (ORCPT ); Fri, 13 Mar 2020 12:49:35 -0400 Received: from mail-ed1-f68.google.com ([209.85.208.68]:39213 "EHLO mail-ed1-f68.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727053AbgCMQtd (ORCPT ); Fri, 13 Mar 2020 12:49:33 -0400 Received: by mail-ed1-f68.google.com with SMTP id df19so6478129edb.6 for ; Fri, 13 Mar 2020 09:49:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=YGG5XY3Ewg2kr6ydPgEVpPEQe8Bu0vVCZeuUuZTd/eQ=; b=WoJn/P9W8ionIJ6xiBiPAmxmGbbYK44xv4IrICoWubAgYlhtkhxUJmVCijstH/13K8 e8sfsXfNGVfsBKnRV0SJuy8a8BZyemhuV3VRdHRn2DarGPfrMqFVOH/OuDqiVr4hokOl UhOrjDnrSoggcD90vmrkTdZGj88Cdu4MhRmnyJ0V4shQjxGwADiObeG6nDXMrC2tX1Sf Zx5guOou8iWTPF16pL8NUnjXXzxYS+GbneCIQZyfvTaduvQymLt4+IWsFLUbJONa/YD2 kXa9vk9xzfHNLaAh621qmRaQsnpJdixash8QTk6Mp+WMhkhfOstdpA5Hj+YyS0gM+Gnv FnoA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=YGG5XY3Ewg2kr6ydPgEVpPEQe8Bu0vVCZeuUuZTd/eQ=; b=dDlYQhyzR8bF1rWaUCrNVkd8+PkyRxz2xGx1jrCn9olsKS72Ns+kzJCETykeHNuK78 5NzYmeUW3hVhJaixdmCBld+920xUNXu5w1/si6B+DdOj8B4w1HRAWkHsaWu7ogDx2Zp4 zffXQ0MtnRQvzKhs2atwtEw3OmOjEZLw59UbRR4JKcAErQYlWtDwu15wmPbB63kNLsR+ nBK1P03IxDKISQV9cy2YK1hlpEdzXlphsjQjYNup5FJSUp6WJmv71OxrfyPminFSJK85 phtFVdZuyKnjrYWZkOZTgwG74qakwOIeQIpZA/pRXZ1OPZwUps81IA/7JwRs1wuu6tRB OlkA== X-Gm-Message-State: ANhLgQ0Y7zmDssmp8TVSlexqiNK4bJ06CnnWLDU06wcPSDJGjCGVJ5tJ rA/FitezUbRdGMo6jfLpYabQNsg32p4+HFG9MSk6 X-Google-Smtp-Source: ADFU+vv+9NsRZqnIPliXMbq5GOtlCub1wdzEkmolWWP97LJYncHkT1zJ8K+tAtQcCN/BN4QsA0IqfHmFy6PXx2taKa0= X-Received: by 2002:aa7:dd01:: with SMTP id i1mr14078117edv.164.1584118169827; Fri, 13 Mar 2020 09:49:29 -0700 (PDT) MIME-Version: 1.0 References: <20200312202733.7kli64zsnqc4mrd2@madcap2.tricolour.ca> <2588582.z15pWOfGEt@x2> In-Reply-To: <2588582.z15pWOfGEt@x2> From: Paul Moore Date: Fri, 13 Mar 2020 12:49:18 -0400 Message-ID: Subject: Re: [PATCH ghak90 V8 07/16] audit: add contid support for signalling the audit daemon To: Steve Grubb Cc: Richard Guy Briggs , linux-audit@redhat.com, nhorman@tuxdriver.com, linux-api@vger.kernel.org, containers@lists.linux-foundation.org, LKML , dhowells@redhat.com, netfilter-devel@vger.kernel.org, ebiederm@xmission.com, simo@redhat.com, netdev@vger.kernel.org, linux-fsdevel@vger.kernel.org, Eric Paris , mpatel@redhat.com, Serge Hallyn Content-Type: text/plain; charset="UTF-8" Sender: linux-api-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-api@vger.kernel.org On Fri, Mar 13, 2020 at 12:45 PM Steve Grubb wrote: > On Friday, March 13, 2020 12:42:15 PM EDT Paul Moore wrote: > > > I think more and more, that more complete isolation is being done, > > > taking advantage of each type of namespace as they become available, but > > > I know a nuber of them didn't find it important yet to use IPC, PID or > > > user namespaces which would be the only namespaces I can think of that > > > would provide that isolation. > > > > > > It isn't entirely clear to me which side you fall on this issue, Paul. > > > > That's mostly because I was hoping for some clarification in the > > discussion, especially the relevant certification requirements, but it > > looks like there is still plenty of room for interpretation there (as > > usual). I'd much rather us arrive at decisions based on requirements > > and not gut feelings, which is where I think we are at right now. > > Certification rquirements are that we need the identity of anyone attempting > to modify the audit configuration including shutting it down. Yep, got it. Unfortunately that doesn't really help with what we are talking about. Although preventing the reuse of the ACID before the SIGNAL2 record does help preserve the sanity of the audit stream which I believe to be very important, regardless. -- paul moore www.paul-moore.com