iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/security
History
Richard Guy Briggs d7481b24b8 audit: issue CWD record to accompany LSM_AUDIT_DATA_* records 
The LSM_AUDIT_DATA_* records for PATH, FILE, IOCTL_OP, DENTRY and INODE
are incomplete without the task context of the AUDIT Current Working
Directory record.  Add it.

This record addition can't use audit_dummy_context to determine whether
or not to store the record information since the LSM_AUDIT_DATA_*
records are initiated by various LSMs independent of any audit rules.
context->in_syscall is used to determine if it was called in user
context like audit_getname.

Please see the upstream issue
https://github.com/linux-audit/audit-kernel/issues/96

Adapted from Vladis Dronov's v2 patch.

Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
2020-07-08 19:02:11 -04:00
..
apparmor
linux-kselftest-kunit-5.8-rc1
2020-06-09 10:04:47 -07:00
bpf
bpf: lsm: Initialize the BPF LSM hooks
2020-03-30 01:34:00 +02:00
integrity
ima: mprotect performance fix
2020-06-12 12:02:41 -07:00
keys
Notifications over pipes + Keyring notifications
2020-06-13 09:56:21 -07:00
loadpin
proc/sysctl: add shared variables for range check
2019-07-18 17:08:07 -07:00
lockdown
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2020-06-02 17:36:24 -07:00
safesetid
security/safesetid: Replace rcu_swap_protected() with rcu_replace_pointer()
2019-10-30 08:45:57 -07:00
selinux
Notifications over pipes + Keyring notifications
2020-06-13 09:56:21 -07:00
smack
Notifications over pipes + Keyring notifications
2020-06-13 09:56:21 -07:00
tomoyo
treewide: replace '---help---' in Kconfig files with 'help'
2020-06-14 01:57:21 +09:00
yama
sysctl: pass kernel pointers to ->proc_handler
2020-04-27 02:07:40 -04:00
commoncap.c
exec: Compute file based creds only once
2020-05-29 22:00:54 -05:00
device_cgroup.c
device_cgroup: Cleanup cgroup eBPF device filter code
2020-04-13 14:41:54 -04:00
inode.c
Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2019-07-19 10:42:02 -07:00
Kconfig
bpf: lsm: Initialize the BPF LSM hooks
2020-03-30 01:34:00 +02:00
Kconfig.hardening
meminit fix
2019-07-28 12:33:15 -07:00
lsm_audit.c
audit: issue CWD record to accompany LSM_AUDIT_DATA_* records
2020-07-08 19:02:11 -04:00
Makefile
device_cgroup: Cleanup cgroup eBPF device filter code
2020-04-13 14:41:54 -04:00
min_addr.c
sysctl: pass kernel pointers to ->proc_handler
2020-04-27 02:07:40 -04:00
security.c
Add additional LSM hooks for SafeSetID
2020-06-14 11:39:31 -07:00