From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1163191AbcG1Hbu (ORCPT ); Thu, 28 Jul 2016 03:31:50 -0400 Received: from mail-wm0-f42.google.com ([74.125.82.42]:35687 "EHLO mail-wm0-f42.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750824AbcG1Hbm (ORCPT ); Thu, 28 Jul 2016 03:31:42 -0400 From: Paul Moore To: Linus Torvalds Cc: linux-audit@redhat.com, linux-kernel@vger.kernel.org Subject: [GIT PULL] Audit patches for 4.8 Date: Thu, 28 Jul 2016 03:31:39 -0400 Message-ID: <1533507.LNkeVHM3b9@sifl> Organization: Red Hat User-Agent: KMail/4.14.10 (Linux/4.6.4-gentoo; KDE/4.14.22; x86_64; ; ) MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi Linus, Six audit patches for 4.8. There are a couple of style and minor whitespace tweaks for the logs, as well as a minor fixup to catch errors on user filter rules, however the major improvements are a fix to the s390 syscall argument masking code (reviewed by the nice s390 folks), some consolidation around the exclude filtering (less code, always a win), and a double-fetch fix for recording the execve arguments. Please pull for 4.8. Thanks, -Paul --- The following changes since commit 2dcd0af568b0cf583645c8a317dd12e344b1c72a: Linux 4.6 (2016-05-15 15:43:13 -0700) are available in the git repository at: git://git.infradead.org/users/pcmoore/audit stable-4.8 for you to fetch changes up to 43761473c254b45883a64441dd0bc85a42f3645c: audit: fix a double fetch in audit_log_single_execve_arg() (2016-07-20 14:15:46 -0400) ---------------------------------------------------------------- Paul Moore (3): audit: fix some horrible switch statement style crimes s390: ensure that syscall arguments are properly masked on s390 audit: fix a double fetch in audit_log_single_execve_arg() Richard Guy Briggs (2): audit: fixup: log on errors from filter user rules audit: add fields to exclude filter by reusing user filter Steve Grubb (1): audit: fix whitespace in CWD record arch/s390/kernel/ptrace.c | 10 +- include/linux/audit.h | 2 - kernel/audit.c | 4 +- kernel/audit.h | 2 + kernel/auditfilter.c | 147 +++++++------------- kernel/auditsc.c | 342 +++++++++++++++++++++--------------------- 6 files changed, 235 insertions(+), 272 deletions(-) -- paul moore security @ redhat