public inbox for [email protected]
 help / color / mirror / Atom feed
* [PATCH v3 0/7] Add uringop support
@ 2021-10-28 19:59 Richard Guy Briggs
  2021-10-28 19:59 ` [PATCH v3 1/7] add basic support for the AUDIT_URINGOP record type Richard Guy Briggs
                   ` (6 more replies)
  0 siblings, 7 replies; 13+ messages in thread
From: Richard Guy Briggs @ 2021-10-28 19:59 UTC (permalink / raw)
  To: Linux-Audit Mailing List; +Cc: io-uring, Steve Grubb, Richard Guy Briggs

Audit support for iouring went into the upstream kernel with commit
5bd2182d58e9 ("audit,io_uring,io-wq: add some basic audit support to io_uring")
and commit 67daf270cebc ("audit: add filtering for io_uring records").

Add userspace support for AUDIT_URINGOP records, uringop fields and the
AUDIT_FILTER_URING_EXIT filter list.

Changelog:
v3
- rebase on openat2                                                                                                                                                                                                                 
- re-factor and re-order patchset

v2
- check for watch before adding perm
- update manpage to include filesystem filter
- add support for the AUDIT_URINGOP record type
- update support for the uring filter list: doc, -U op, op names
- add uringop support to ausearch
- add uringop support to aureport
- lots of bug fixes

Richard Guy Briggs (7):
  add basic support for the AUDIT_URINGOP record type
  add support for the uring filter list
  add support for uringop names
  add field support for the AUDIT_URINGOP record type
  add ausearch --uringop option
  add aureport --uringop option
  add iouring support to the normalizer

 audisp/plugins/ids/model_behavior.c |   1 +
 auparse/auparse-defs.h              |   2 +-
 auparse/auparse-idata.h             |   1 +
 auparse/ellist.c                    |   7 ++
 auparse/interpret.c                 |  21 ++++-
 auparse/normalize.c                 |   1 +
 auparse/normalize_record_map.h      |   1 +
 auparse/rnode.h                     |   1 +
 auparse/typetab.h                   |   1 +
 bindings/python/auparse_python.c    |   1 +
 contrib/plugin/audisp-example.c     |   1 +
 docs/audit.rules.7                  |  19 +++--
 docs/audit_add_rule_data.3          |   4 +
 docs/auditctl.8                     |  10 ++-
 docs/aureport.8                     |   3 +
 docs/ausearch.8                     |   3 +
 lib/Makefile.am                     |  17 +++-
 lib/flagtab.h                       |  11 +--
 lib/libaudit.c                      |  50 ++++++++---
 lib/libaudit.h                      |  11 +++
 lib/lookup_table.c                  |  21 +++++
 lib/msg_typetab.h                   |   1 +
 lib/private.h                       |   1 +
 lib/test/lookup_test.c              |  17 ++++
 lib/uringop_table.h                 |  62 ++++++++++++++
 src/auditctl-listing.c              |  52 ++++++++----
 src/auditctl.c                      | 121 +++++++++++++++++++++++----
 src/auditd-event.c                  |   1 +
 src/aureport-options.c              |  19 ++++-
 src/aureport-options.h              |   2 +-
 src/aureport-output.c               |  37 +++++++++
 src/aureport-scan.c                 |  26 ++++++
 src/aureport-scan.h                 |   2 +
 src/aureport.c                      |   3 +-
 src/ausearch-common.h               |   1 +
 src/ausearch-llist.c                |   2 +
 src/ausearch-llist.h                |   1 +
 src/ausearch-lookup.c               |  25 ++++++
 src/ausearch-lookup.h               |   1 +
 src/ausearch-match.c                |   6 +-
 src/ausearch-options.c              |  36 +++++++-
 src/ausearch-parse.c                | 123 +++++++++++++++++++++++++++-
 src/ausearch-report.c               |  21 ++++-
 43 files changed, 677 insertions(+), 70 deletions(-)
 create mode 100644 lib/uringop_table.h

-- 
2.27.0


^ permalink raw reply	[flat|nested] 13+ messages in thread

end of thread, other threads:[~2021-11-02 16:36 UTC | newest]

Thread overview: 13+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2021-10-28 19:59 [PATCH v3 0/7] Add uringop support Richard Guy Briggs
2021-10-28 19:59 ` [PATCH v3 1/7] add basic support for the AUDIT_URINGOP record type Richard Guy Briggs
2021-10-28 21:19   ` Steve Grubb
2021-10-28 19:59 ` [PATCH v3 2/7] add support for the uring filter list Richard Guy Briggs
2021-10-29 18:39   ` Steve Grubb
2021-11-01 15:05     ` Richard Guy Briggs
2021-11-01 15:58       ` Steve Grubb
2021-11-02 16:32         ` Richard Guy Briggs
2021-10-28 19:59 ` [PATCH v3 3/7] add support for uringop names Richard Guy Briggs
2021-10-28 19:59 ` [PATCH v3 4/7] add field support for the AUDIT_URINGOP record type Richard Guy Briggs
2021-10-28 19:59 ` [PATCH v3 5/7] add ausearch --uringop option Richard Guy Briggs
2021-10-28 19:59 ` [PATCH v3 6/7] add aureport " Richard Guy Briggs
2021-10-28 19:59 ` [PATCH v3 7/7] add iouring support to the normalizer Richard Guy Briggs

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox