• Linus Torvalds's avatar
    Merge tag 'audit-pr-20180814' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit · 8c326850
    Linus Torvalds authored
    Pull audit patches from Paul Moore:
     "Twelve audit patches for v4.19 and they run the full gamut from fixes
      to features.
      Notable changes include the ability to use the "exe" audit filter
      field in a wider variety of filter types, a fix for our comparison of
      GID/EGID in audit filter rules, better association of related audit
      records (connecting related audit records together into one audit
      event), and a fix for a potential use-after-free in audit_add_watch().
      All the patches pass the audit-testsuite and merge cleanly on your
      current master branch"
    * tag 'audit-pr-20180814' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit:
      audit: fix use-after-free in audit_add_watch
      audit: use ktime_get_coarse_real_ts64() for timestamps
      audit: use ktime_get_coarse_ts64() for time access
      audit: simplify audit_enabled check in audit_watch_log_rule_change()
      audit: check audit_enabled in audit_tree_log_remove_rule()
      cred: conditionally declare groups-related functions
      audit: eliminate audit_enabled magic number comparison
      audit: rename FILTER_TYPE to FILTER_EXCLUDE
      audit: Fix extended comparison of GID/EGID
      audit: tie ANOM_ABEND records to syscall
      audit: tie SECCOMP records to syscall
      audit: allow other filter list types for AUDIT_EXE
auditsc.c 67 KB