Pull audit updates from Paul Moore: "Summary of the significant patches: - Record information about binds/unbinds to the audit multicast socket. This helps identify which processes have/had access to the information in the audit stream. - Cleanup and add some additional information to the netfilter configuration events collected by audit. - Fix some of the audit error handling code so we don't leak network namespace references" * tag 'audit-pr-20200601' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit: audit: add subj creds to NETFILTER_CFG record to audit: Replace zero-length array with flexible-array audit: make symbol 'audit_nfcfgs' static netfilter: add audit table unregister actions audit: tidy and extend netfilter_cfg x_tables audit: log audit netlink multicast bind and unbind audit: fix a net reference leak in audit_list_rules_send() audit: fix a net reference leak in audit_send_reply()
Showing the changes to include/uapi/linux (1 of 8 files). Show all
Unified · Split
| @@ -117,6 +117,7 @@ · 116 unmodified lines | |||
| 117 | #define AUDIT_TIME_INJOFFSET 1332 /* Timekeeping offset injected */ | 117 | #define AUDIT_TIME_INJOFFSET 1332 /* Timekeeping offset injected */ |
| 118 | #define AUDIT_TIME_ADJNTPVAL 1333 /* NTP value adjustment */ | 118 | #define AUDIT_TIME_ADJNTPVAL 1333 /* NTP value adjustment */ |
| 119 | #define AUDIT_BPF 1334 /* BPF subsystem */ | 119 | #define AUDIT_BPF 1334 /* BPF subsystem */ |
| 120 | #define AUDIT_EVENT_LISTENER 1335 /* Task joined multicast read socket */ | ||
| 120 | 121 | ||
| 121 | #define AUDIT_AVC 1400 /* SE Linux avc denial or grant */ | 122 | #define AUDIT_AVC 1400 /* SE Linux avc denial or grant */ |
| 122 | #define AUDIT_SELINUX_ERR 1401 /* Internal SE Linux Errors */ | 123 | #define AUDIT_SELINUX_ERR 1401 /* Internal SE Linux Errors */ |