Pull audit updates from Eric Paris. * git://git.infradead.org/users/eparis/audit: (28 commits) AUDIT: make audit_is_compat depend on CONFIG_AUDIT_COMPAT_GENERIC audit: renumber AUDIT_FEATURE_CHANGE into the 1300 range audit: do not cast audit_rule_data pointers pointlesly AUDIT: Allow login in non-init namespaces audit: define audit_is_compat in kernel internal header kernel: Use RCU_INIT_POINTER(x, NULL) in audit.c sched: declare pid_alive as inline audit: use uapi/linux/audit.h for AUDIT_ARCH declarations syscall_get_arch: remove useless function arguments audit: remove stray newline from audit_log_execve_info() audit_panic() call audit: remove stray newlines from audit_log_lost messages audit: include subject in login records audit: remove superfluous new- prefix in AUDIT_LOGIN messages audit: allow user processes to log from another PID namespace audit: anchor all pid references in the initial pid namespace audit: convert PPIDs to the inital PID namespace. pid: get pid_t ppid of task in init_pid_ns audit: rename the misleading audit_get_context() to audit_take_context() audit: Add generic compat syscall support audit: Add CONFIG_HAVE_ARCH_AUDITSYSCALL ...
Showing the changes to include/uapi (2 of 36 files). Show all
Unified · Split
| @@ -70,7 +70,6 @@ · 69 unmodified lines | ||
| 70 | 70 | #define AUDIT_TTY_SET 1017 /* Set TTY auditing status */ |
| 71 | 71 | #define AUDIT_SET_FEATURE 1018 /* Turn an audit feature on or off */ |
| 72 | 72 | #define AUDIT_GET_FEATURE 1019 /* Get which features are enabled */ |
| 73 | −#define AUDIT_FEATURE_CHANGE 1020 /* audit log listing feature changes */ | |
| 74 | 73 | |
| 75 | 74 | #define AUDIT_FIRST_USER_MSG 1100 /* Userspace messages mostly uninteresting to kernel */ |
| 76 | 75 | #define AUDIT_USER_AVC 1107 /* We filter this differently */ |
| @@ -109,6 +108,8 @@ · 32 unmodified lines | ||
| 109 | 108 | #define AUDIT_NETFILTER_PKT 1324 /* Packets traversing netfilter chains */ |
| 110 | 109 | #define AUDIT_NETFILTER_CFG 1325 /* Netfilter chain modifications */ |
| 111 | 110 | #define AUDIT_SECCOMP 1326 /* Secure Computing event */ |
| 111 | +#define AUDIT_PROCTITLE 1327 /* Proctitle emit event */ | |
| 112 | +#define AUDIT_FEATURE_CHANGE 1328 /* audit log listing feature changes */ | |
| 112 | 113 | |
| 113 | 114 | #define AUDIT_AVC 1400 /* SE Linux avc denial or grant */ |
| 114 | 115 | #define AUDIT_SELINUX_ERR 1401 /* Internal SE Linux Errors */ |
| @@ -308,8 +308,12 @@ struct vfs_cap_data { · 307 unmodified lines | ||
| 308 | 308 | |
| 309 | 309 | #define CAP_LEASE 28 |
| 310 | 310 | |
| 311 | +/* Allow writing the audit log via unicast netlink socket */ | |
| 312 | + | |
| 311 | 313 | #define CAP_AUDIT_WRITE 29 |
| 312 | 314 | |
| 315 | +/* Allow configuration of audit via unicast netlink socket */ | |
| 316 | + | |
| 313 | 317 | #define CAP_AUDIT_CONTROL 30 |
| 314 | 318 | |
| 315 | 319 | #define CAP_SETFCAP 31 |