1. 19 May, 2005 3 commits
    • David Woodhouse's avatar
      Restore logging of pid= and comm= in AVC audit messages · cd77b821
      David Woodhouse authored
      We turned this all off because the 'exe=' was causing deadlocks on
      dcache_lock. There's no need to leave the pid and comm out though. 
      They'll all be logged correctly if full auditing is enabled, but we
      should still print them in case auditing _isn't_ enabled.
      Signed-off-by: default avatarDavid Woodhouse <dwmw2@infradead.org>
      cd77b821
    • David Woodhouse's avatar
      AUDIT: Send netlink messages from a separate kernel thread · b7d11258
      David Woodhouse authored
      netlink_unicast() will attempt to reallocate and will free messages if
      the socket's rcvbuf limit is reached unless we give it an infinite 
      timeout. So do that, from a kernel thread which is dedicated to spewing
      stuff up the netlink socket.
      Signed-off-by: default avatarDavid Woodhouse <dwmw2@infradead.org>
      b7d11258
    • Steve Grubb's avatar
      AUDIT: Clean up logging of untrusted strings · 168b7173
      Steve Grubb authored
      * If vsnprintf returns -1, it will mess up the sk buffer space accounting. 
      This is fixed by not calling skb_put with bogus len values.
      
      * audit_log_hex was a loop that called audit_log_vformat with %02X for each 
      character. This is very inefficient since conversion from unsigned character 
      to Ascii representation is essentially masking, shifting, and byte lookups. 
      Also, the length of the converted string is well known - it's twice the 
      original. Fixed by rewriting the function.
      
      * audit_log_untrustedstring had no comments. This makes it hard for 
      someone to understand what the string format will be.
      
      * audit_log_d_path was never fixed to use untrustedstring. This could mess
      up user space parsers. This was fixed to make a temp buffer, call d_path, 
      and log temp buffer using untrustedstring. 
      
      From: Steve Grubb <sgrubb@redhat.com>
      Signed-off-by: default avatarDavid Woodhouse <dwmw2@infradead.org>
      168b7173
  2. 18 May, 2005 1 commit
  3. 17 May, 2005 6 commits
  4. 16 May, 2005 7 commits
  5. 13 May, 2005 4 commits
  6. 12 May, 2005 4 commits
  7. 11 May, 2005 5 commits
  8. 10 May, 2005 9 commits
  9. 09 May, 2005 1 commit