linux-kernel - Audit fixes for v4.11 (#1)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAGH-KgsSh73q8pTymj2QH_zFxJdvioZGj9+oTn6a5=Ueo0Z4BA@mail.gmail.com>
Date:   Fri, 24 Mar 2017 17:39:15 -0400
From:   Paul Moore <pmoore@...hat.com>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     linux-audit@...hat.com, linux-kernel@...r.kernel.org,
        Dmitry Vyukov <dvyukov@...gle.com>
Subject: Audit fixes for v4.11 (#1)

Hi Linus,

We've got an audit fix, and unfortunately it is two things I don't
like: big and based on a -rcX tag.  The size of the patch is
(hopefully) explained well in the patch description, the -rcX base is
to get access to code not present in the v4.11 pull request
(audit/next is still based off v4.8; I'll be updating soon).  While
I'm not excited that we need to be sending you something this large
during the -rcX phase, it does fix some very real, and very tangled,
problems relating to locking, backlog queues, and the audit daemon
connection.

This code has passed our testsuite without problem and it has held up
to my ad-hoc stress tests (arguably better than the existing code),
please consider pulling this as fix for the next v4.11-rcX tag.

Thanks,
-Paul

---
The following changes since commit 97da3854c526d3a6ee05c849c96e48d21527606c:

 Linux 4.11-rc3 (2017-03-19 19:09:39 -0700)

are available in the git repository at:

 git://git.infradead.org/users/pcmoore/audit stable-4.11

for you to fetch changes up to 5b52330bbfe63b3305765354d6046c9f7f89c011:

 audit: fix auditd/kernel connection state tracking (2017-03-21 11:26:35 -0400)

----------------------------------------------------------------
Paul Moore (1):
     audit: fix auditd/kernel connection state tracking

kernel/audit.c   | 639 ++++++++++++++++++++++++++++++++++---------------------
kernel/audit.h   |   9 +-
kernel/auditsc.c |   6 +-
3 files changed, 399 insertions(+), 255 deletions(-)

-- 
paul moore
security @ redhat