linux-kernel - Re: [PATCH 11/15] fixing audit rule ordering mess, part 1

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20081217205902.GH28946@ZenIV.linux.org.uk>
Date:	Wed, 17 Dec 2008 20:59:02 +0000
From:	Al Viro <viro@...IV.linux.org.uk>
To:	Eric Paris <eparis@...hat.com>
Cc:	Al Viro <viro@....linux.org.uk>, linux-audit@...hat.com,
	linux-kernel@...r.kernel.org
Subject: Re: [PATCH 11/15] fixing audit rule ordering mess, part 1

On Wed, Dec 17, 2008 at 01:28:08PM -0500, Eric Paris wrote:

> I don't see why prio is only important on AUDIT_FILTER_EXIT.  Couldn't I
> end up with stupidity with entry,never  ?


AUDIT_WATCH and AUDIT_INODE can live only on exit chain.  I.e. we don't have
that problem - other chains sit on the lists of their own and there the
list ordering itself takes care of everything.  Exit chain has parts in
sitting in hash instead of the primary list.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/