[GIT PULL] Audit patches for v5.9
From: Paul Moore
Date: Mon Aug 03 2020 - 21:00:16 EST
Hi Linus,
Here are the audit patches for the v5.9 merge window. All of the
patches in this pull request pass our test suite and merged cleanly
with your tree from a few hours ago.
Aside from some smaller bug fixes, here are the highlights:
- Add a new backlog wait metric to the audit status message, this is
intended to help admins determine how long processes have been waiting
for the audit backlog queue to clear
- Generate audit records for nftables configuration changes
- Generate CWD audit records for for the relevant LSM audit records
Please merge for v5.9, thanks,
-Paul
--
The following changes since commit b3a9e3b9622ae10064826dccb4f7a52bd88c7407:
Linux 5.8-rc1 (2020-06-14 12:45:04 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git
tags/audit-pr-20200803
for you to fetch changes up to b43870c74f3fdf0cd06bf5f1b7a5ed70a2cd4ed2:
audit: report audit wait metric in audit status reply
(2020-07-21 11:21:44 -0400)
----------------------------------------------------------------
audit/stable-5.9 PR 20200803
----------------------------------------------------------------
Gustavo A. R. Silva (1):
audit: Use struct_size() helper in alloc_chunk
Max Englander (1):
audit: report audit wait metric in audit status reply
Paul Moore (1):
audit: use the proper gfp flags in the audit_log_nfcfg() calls
Richard Guy Briggs (5):
audit: log nftables configuration change events
audit: add gfp parameter to audit_log_nfcfg
audit: remove unused !CONFIG_AUDITSYSCALL __audit_inode* stubs
audit: issue CWD record to accompany LSM_AUDIT_DATA_* records
audit: purge audit_log_string from the intra-kernel audit API
include/linux/audit.h | 46 +++++++++++------
include/uapi/linux/audit.h | 18 ++++---
kernel/audit.c | 39 +++++++++-----
kernel/audit_tree.c | 4 +-
kernel/auditsc.c | 45 +++++++++++++---
net/bridge/netfilter/ebtables.c | 6 +--
net/netfilter/nf_tables_api.c | 112 ++++++++++++++++++++++++++++++++++++
net/netfilter/x_tables.c | 5 +-
security/apparmor/audit.c | 10 ++--
security/apparmor/file.c | 25 +++------
security/apparmor/ipc.c | 46 ++++++++---------
security/apparmor/net.c | 14 ++---
security/lsm_audit.c | 9 +++-
13 files changed, 273 insertions(+), 106 deletions(-)
--
paul moore
www.paul-moore.com