[GIT PULL] Audit patches for v4.11

From: Paul Moore
Date: Tue Feb 21 2017 - 16:20:15 EST

Hi Linux,

The audit changes for v4.11 are relatively small compared to what we
did for v4.10, both in terms of size and impact. The two patches from
Steve tweak the formatting for some of the audit records to make them
more consistent with other audit records. The three patches from
Richard record the name of a module on module load, fix the logging of
sockaddr information when using socketcall() on 32-bit systems, and
add the ability to reset audit's lost record counter. My lone patch
just fixes an annoying style nit that I was reminded about by one of
Richard's patches.

All these patches pass our test suite, please merge them for v4.11.


The following changes since commit 533c7b69c764ad5febb3e716899f43a75564fcab:

audit: use proper refcount locking on audit_sock (2016-12-14 13:06:04 -0500)

are available in the git repository at:

git://git.infradead.org/users/pcmoore/audit stable-4.11

for you to fetch changes up to fe8e52b9b9100c486051aaf5208dbf4072bb87b1:

audit: remove unnecessary curly braces from switch/case statements
(2017-02-14 13:32:12 -0500)

Paul Moore (1):
audit: remove unnecessary curly braces from switch/case statements

Richard Guy Briggs (3):
audit: add feature audit_lost reset
audit: log 32-bit socketcalls
audit: log module name on init_module

Steve Grubb (2):
audit: Make AUDIT_KERNEL event conform to the specification
audit: Make AUDIT_ANOM_ABEND event normalized

include/linux/audit.h | 32 ++++++++++++++++++++++++++++++++
include/uapi/linux/audit.h | 7 ++++++-
kernel/audit.c | 12 ++++++++++--
kernel/audit.h | 3 +++
kernel/auditsc.c | 40 +++++++++++++++++++++++++++-------------
kernel/module.c | 5 ++++-
net/compat.c | 17 ++++++++++++++---
7 files changed, 96 insertions(+), 20 deletions(-)

paul moore
security @ redhat