linux-kernel - [GIT PULL] Audit patches for v5.9

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 3 Aug 2020 21:00:01 -0400
From:   Paul Moore <paul@...l-moore.com>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     linux-audit@...hat.com, linux-kernel@...r.kernel.org
Subject: [GIT PULL] Audit patches for v5.9

Hi Linus,

Here are the audit patches for the v5.9 merge window.  All of the
patches in this pull request pass our test suite and merged cleanly
with your tree from a few hours ago.

Aside from some smaller bug fixes, here are the highlights:

- Add a new backlog wait metric to the audit status message, this is
intended to help admins determine how long processes have been waiting
for the audit backlog queue to clear

- Generate audit records for nftables configuration changes

- Generate CWD audit records for for the relevant LSM audit records

Please merge for v5.9, thanks,
-Paul

--
The following changes since commit b3a9e3b9622ae10064826dccb4f7a52bd88c7407:

 Linux 5.8-rc1 (2020-06-14 12:45:04 -0700)

are available in the Git repository at:

 git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git
   tags/audit-pr-20200803

for you to fetch changes up to b43870c74f3fdf0cd06bf5f1b7a5ed70a2cd4ed2:

 audit: report audit wait metric in audit status reply
   (2020-07-21 11:21:44 -0400)

----------------------------------------------------------------
audit/stable-5.9 PR 20200803

----------------------------------------------------------------
Gustavo A. R. Silva (1):
     audit: Use struct_size() helper in alloc_chunk

Max Englander (1):
     audit: report audit wait metric in audit status reply

Paul Moore (1):
     audit: use the proper gfp flags in the audit_log_nfcfg() calls

Richard Guy Briggs (5):
     audit: log nftables configuration change events
     audit: add gfp parameter to audit_log_nfcfg
     audit: remove unused !CONFIG_AUDITSYSCALL __audit_inode* stubs
     audit: issue CWD record to accompany LSM_AUDIT_DATA_* records
     audit: purge audit_log_string from the intra-kernel audit API

include/linux/audit.h           |  46 +++++++++++------
include/uapi/linux/audit.h      |  18 ++++---
kernel/audit.c                  |  39 +++++++++-----
kernel/audit_tree.c             |   4 +-
kernel/auditsc.c                |  45 +++++++++++++---
net/bridge/netfilter/ebtables.c |   6 +--
net/netfilter/nf_tables_api.c   | 112 ++++++++++++++++++++++++++++++++++++
net/netfilter/x_tables.c        |   5 +-
security/apparmor/audit.c       |  10 ++--
security/apparmor/file.c        |  25 +++------
security/apparmor/ipc.c         |  46 ++++++++---------
security/apparmor/net.c         |  14 ++---
security/lsm_audit.c            |   9 +++-
13 files changed, 273 insertions(+), 106 deletions(-)

-- 
paul moore
www.paul-moore.com