Steve Grubb 6a01b07fae [PATCH] audit config lockdown ... The following patch adds a new mode to the audit system. It uses the audit_enabled config option to introduce the idea of audit enabled, but configuration is immutable. Any attempt to change the configuration while in this mode is audited. To change the audit rules, you'd need to reboot the machine. To use this option, you'd need a modified version of auditctl and use "-e 2". This is intended to go at the end of the audit.rules file for people that want an immutable configuration. This patch also adds "res=" to a number of configuration commands that did not have it before. Signed-off-by: Steve Grubb <sgrubb@redhat.com> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>		2007-02-17 21:30:12 -05:00
..
irq	[PATCH] small irq management simplification	2007-02-16 08:14:00 -08:00
power
time	[PATCH] Add debugging feature /proc/timer_list	2007-02-16 08:13:59 -08:00
.gitignore
acct.c
audit.c	[PATCH] audit config lockdown	2007-02-17 21:30:12 -05:00
audit.h
auditfilter.c	[PATCH] minor update to rule add/delete messages (ver 2)	2007-02-17 21:30:09 -05:00
auditsc.c
capability.c	[PATCH] pid: replace do/while_each_task_pid with do/while_each_pid_task	2007-02-12 09:48:32 -08:00
compat.c	[PATCH] Common compat_sys_sysinfo	2007-02-11 10:51:32 -08:00
configs.c
cpu.c
cpuset.c	[PATCH] mark struct inode_operations const 2	2007-02-12 09:48:46 -08:00
delayacct.c
dma.c
exec_domain.c
exit.c	[PATCH] pid: replace is_orphaned_pgrp with is_current_pgrp_orphaned	2007-02-12 09:48:32 -08:00
extable.c
fork.c	[PATCH] hrtimers: namespace and enum cleanup	2007-02-16 08:13:58 -08:00
futex_compat.c
futex.c	[PATCH] hrtimers: namespace and enum cleanup	2007-02-16 08:13:58 -08:00
hrtimer.c	[PATCH] Add debugging feature /proc/timer_stat	2007-02-16 08:13:59 -08:00
itimer.c	[PATCH] hrtimers: prevent possible itimer DoS	2007-02-16 08:13:59 -08:00
kallsyms.c
Kconfig.hz
Kconfig.preempt
kexec.c
kfifo.c	[PATCH] Numerous fixes to kernel-doc info in source files.	2007-02-11 10:51:32 -08:00
kmod.c	[PATCH] x86-64: Allow to run a program when a machine check event is detected	2007-02-13 13:26:23 +01:00
kprobes.c
ksysfs.c
kthread.c	[PATCH] Numerous fixes to kernel-doc info in source files.	2007-02-11 10:51:32 -08:00
latency.c
lockdep_internals.h
lockdep_proc.c	[PATCH] remove many unneeded #includes of sched.h	2007-02-14 08:09:54 -08:00
lockdep.c
Makefile	[PATCH] sysctl: move utsname sysctls to their own file	2007-02-14 08:09:58 -08:00
module.c
mutex-debug.c	[PATCH] remove many unneeded #includes of sched.h	2007-02-14 08:09:54 -08:00
mutex-debug.h
mutex.c
mutex.h
nsproxy.c
panic.c
params.c
pid.c
posix-cpu-timers.c	[PATCH] posix timers: RCU optimization for clock_gettime()	2007-02-16 08:14:00 -08:00
posix-timers.c	[PATCH] hrtimers: add high resolution timer support	2007-02-16 08:13:59 -08:00
printk.c	[PATCH] order of lockdep off/on in vprintk() should be changed	2007-02-11 11:18:06 -08:00
profile.c	[PATCH] proc: remove useless (and buggy) ->nlink settings	2007-02-11 10:51:32 -08:00
ptrace.c
rcupdate.c
rcutorture.c
relay.c	[PATCH] Numerous fixes to kernel-doc info in source files.	2007-02-11 10:51:32 -08:00
resource.c	[PATCH] remove many unneeded #includes of sched.h	2007-02-14 08:09:54 -08:00
rtmutex_common.h
rtmutex-debug.c
rtmutex-debug.h
rtmutex-tester.c
rtmutex.c	[PATCH] hrtimers: namespace and enum cleanup	2007-02-16 08:13:58 -08:00
rtmutex.h
rwsem.c
sched.c	[PATCH] i386: paravirt CPU hypercall batching mode	2007-02-13 13:26:21 +01:00
seccomp.c
signal.c	[PATCH] hrtimers: prevent possible itimer DoS	2007-02-16 08:13:59 -08:00
softirq.c	[PATCH] tick-management: dyntick / highres functionality	2007-02-16 08:13:59 -08:00
softlockup.c
spinlock.c
srcu.c
stacktrace.c
stop_machine.c
sys_ni.c
sys.c	[PATCH] pid: replace do/while_each_task_pid with do/while_each_pid_task	2007-02-12 09:48:32 -08:00
sysctl.c	[PATCH] sysctl: add a parent entry to ctl_table and set the parent entry	2007-02-14 08:10:00 -08:00
taskstats.c
time.c	[PATCH] Fix multiple conversion bugs in msecs_to_jiffies	2007-02-16 08:13:56 -08:00
timer.c	[PATCH] generic: vsyscall-gtod support for GENERIC_TIME	2007-02-16 08:14:00 -08:00
tsacct.c	[PATCH] time: x86_64: split x86_64/kernel/time.c up	2007-02-16 08:14:00 -08:00
uid16.c
user.c
utsname_sysctl.c	[PATCH] sysctl: remove insert_at_head from register_sysctl	2007-02-14 08:09:59 -08:00
utsname.c
wait.c
workqueue.c	[PATCH] Add debugging feature /proc/timer_stat	2007-02-16 08:13:59 -08:00