linux-toradex.git/kernel/auditsc.c, branch v2.6.14-rc4

[AUDIT] Allow filtering on system call success _or_ failure

2005-08-27T09:25:43+00:00

Signed-off-by: David Woodhouse

AUDIT: Prevent duplicate syscall rules

2005-08-17T15:05:35+00:00

The following patch against audit.81 prevents duplicate syscall rules in
a given filter list by walking the list on each rule add.

I also removed the unused struct audit_entry in audit.c and made the
static inlines in auditsc.c consistent.

Signed-off-by: Amy Griffis 
Signed-off-by: David Woodhouse

AUDIT: Speed up audit_filter_syscall() for the non-auditable case.

2005-08-17T13:49:57+00:00

It was showing up fairly high on profiles even when no rules were set.
Make sure the common path stays as fast as possible.

Signed-off-by: David Woodhouse

AUDIT: Fix task refcount leak in audit_filter_syscall()

2005-08-17T13:45:55+00:00

Signed-off-by: David Woodhouse

AUDIT: Reduce contention in audit_serial()

2005-07-18T18:24:46+00:00

... by generating serial numbers only if an audit context is actually
_used_, rather than doing so at syscall entry even when the context
isn't necessarily marked auditable.

Signed-off-by: David Woodhouse

AUDIT: Fix compile error in audit_filter_syscall

2005-07-14T13:40:06+00:00

We didn't rename it to audit_tgid after all. Except once... Doh.

Signed-off-by: David Woodhouse

AUDIT: Avoid scheduling in idle thread

2005-07-13T21:47:07+00:00

When we flush a pending syscall audit record due to audit_free(), we
might be doing that in the context of the idle thread. So use GFP_ATOMIC

Signed-off-by: David Woodhouse

AUDIT: Exempt the whole auditd thread-group from auditing

2005-07-13T21:39:34+00:00

and not just the one thread.

Signed-off-by: David Woodhouse

AUDIT: Really don't audit auditd.

2005-07-02T13:10:46+00:00

The pid in the audit context isn't always set up. Use tsk->pid when 
checking whether it's auditd in audit_filter_syscall(), instead of 
ctx->pid. Remove a band-aid which did the same elsewhere.

Signed-off-by: David Woodhouse

AUDIT: Clean up user message filtering

2005-06-24T13:14:05+00:00

Don't look up the task by its pid and then use the syscall filtering
helper. Just implement our own filter helper which operates solely on
the information in the netlink_skb_parms. 

Signed-off-by: David Woodhouse