From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1755691AbbCFPlY (ORCPT ); Fri, 6 Mar 2015 10:41:24 -0500 Received: from mail-we0-f179.google.com ([74.125.82.179]:47005 "EHLO mail-we0-f179.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1755680AbbCFPlP (ORCPT ); Fri, 6 Mar 2015 10:41:15 -0500 From: David Drysdale To: Brian Gerst , Ingo Molnar Cc: "H. Peter Anvin" , AKASHI Takahiro , Richard Guy Briggs , Eric Paris , Paul Moore , stable@vger.kernel.org, linux-audit@redhat.com, linux-kernel@vger.kernel.org, David Drysdale Subject: [PATCH 0/2] Update audit syscall classification for execve variants Date: Fri, 6 Mar 2015 15:40:36 +0000 Message-Id: <1425656438-3884-1-git-send-email-drysdale@google.com> X-Mailer: git-send-email 2.2.0.rc0.207.ga3a616c Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Add a couple of missing execve variants to the syscall classification code in the audit system. - Patch 1 is potentially suitable for 3.19 stable. - Patch 2 need not be back-applied, as audit doesn't yet work with x32 syscalls in general. David Drysdale (2): audit: add execveat to syscall classification audit,x86: add x32_execve[at] to syscall classification arch/x86/kernel/audit_64.c | 6 ++++++ lib/compat_audit.c | 3 +++ 2 files changed, 9 insertions(+) -- 1.9.1