Amy Griffis 9c937dcc71 [PATCH] log more info for directory entry change events ... When an audit event involves changes to a directory entry, include a PATH record for the directory itself. A few other notable changes: - fixed audit_inode_child() hooks in fsnotify_move() - removed unused flags arg from audit_inode() - added audit log routines for logging a portion of a string Here's some sample output. before patch: type=SYSCALL msg=audit(1149821605.320:26): arch=40000003 syscall=39 success=yes exit=0 a0=bf8d3c7c a1=1ff a2=804e1b8 a3=bf8d3c7c items=1 ppid=739 pid=800 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=ttyS0 comm="mkdir" exe="/bin/mkdir" subj=root:system_r:unconfined_t:s0-s0:c0.c255 type=CWD msg=audit(1149821605.320:26): cwd="/root" type=PATH msg=audit(1149821605.320:26): item=0 name="foo" parent=164068 inode=164010 dev=03:00 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=root:object_r:user_home_t:s0 after patch: type=SYSCALL msg=audit(1149822032.332:24): arch=40000003 syscall=39 success=yes exit=0 a0=bfdd9c7c a1=1ff a2=804e1b8 a3=bfdd9c7c items=2 ppid=714 pid=777 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=ttyS0 comm="mkdir" exe="/bin/mkdir" subj=root:system_r:unconfined_t:s0-s0:c0.c255 type=CWD msg=audit(1149822032.332:24): cwd="/root" type=PATH msg=audit(1149822032.332:24): item=0 name="/root" inode=164068 dev=03:00 mode=040750 ouid=0 ogid=0 rdev=00:00 obj=root:object_r:user_home_dir_t:s0 type=PATH msg=audit(1149822032.332:24): item=1 name="foo" inode=164010 dev=03:00 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=root:object_r:user_home_t:s0 Signed-off-by: Amy Griffis <amy.griffis@hp.com> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>		2006-06-20 05:25:28 -04:00
..
acpi
asm-alpha	[PATCH] alpha: SMP IRQ routing fix	2006-06-05 12:29:16 -07:00
asm-arm	[ARM] 3547/1: PXA-OHCI: Allow platforms to specify a power budget	2006-06-08 22:44:07 +01:00
asm-arm26
asm-cris
asm-frv
asm-generic	[SPARC64]: Fix D-cache corruption in mremap	2006-06-01 17:47:25 -07:00
asm-h8300
asm-i386	[PATCH] x86_64: avoid IRQ0 ioapic pin collision	2006-05-08 09:34:56 -07:00
asm-ia64	[IA64] remove asm-ia64/bitops.h self-inclusion	2006-05-05 11:37:15 -07:00
asm-m32r	[PATCH] m32r: update switch_to macro for tuning	2006-04-19 09:13:51 -07:00
asm-m68k
asm-m68knommu
asm-mips	[MIPS] Fix sparsemem support.	2006-06-06 00:15:20 +01:00
asm-parisc	[PARISC] Make ioremap default to _nocache	2006-04-21 22:20:35 +00:00
asm-powerpc	[PATCH] powerpc: enable CPU_FTR_CI_LARGE_PAGE for cell	2006-06-17 10:56:24 -07:00
asm-ppc	powerpc/32: Define an is_kernel_addr() to fix ARCH=ppc compilation	2006-05-09 16:00:59 +10:00
asm-s390	[PATCH] s390: fix in-user atomic futex operation.	2006-06-08 15:15:30 -07:00
asm-sh
asm-sh64
asm-sparc	[SPARC]: Add robust futex syscall entries.	2006-05-21 21:22:53 -07:00
asm-sparc64	[SPARC64]: Fix D-cache corruption in mremap	2006-06-01 17:47:25 -07:00
asm-um	[PATCH] uml: more __user annotations	2006-06-05 12:29:17 -07:00
asm-v850
asm-x86_64	[PATCH] x86_64: Fix stack/mmap randomization for compat tasks	2006-05-30 20:31:05 -07:00
asm-xtensa	[PATCH] request_irq(): remove warnings from irq probing	2006-04-28 08:33:46 -07:00
keys
linux	[PATCH] log more info for directory entry change events	2006-06-20 05:25:28 -04:00
math-emu
media
mtd
net	[PATCH] net/compat.h build fix	2006-05-31 16:27:11 -07:00
pcmcia
rdma
rxrpc
scsi	[SCSI] srp.h: avoid padding of structs	2006-04-28 10:14:15 -05:00
sound	[ALSA] Fix Oops at rmmod with CONFIG_SND_VERBOSE_PROCFS=n	2006-04-27 21:10:42 +02:00
video