linux-audit audit-kernel issues

linux-audit / audit-kernel

GitHub mirror of the Linux Kernel's audit repository

https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git

Other

140 stars 37 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

BUG: fix typo in README.md

#168 rprobaina closed 2 months ago
3
Q: different results watching destination file name vs destination directory

#167 bobbintb opened 3 months ago
1
Q: add incorrect rules to the rule table

#166 LidiYuan closed 4 months ago
1
Q: rules and filterkeys do not match

#165 LidiYuan closed 4 months ago
1
BUG: USER_CMD is not recording every user command

#164 mahendra9408 closed 4 months ago
1
BUG: intermediate directories missing in audit PATH records

#163 naugustine98 opened 4 months ago
6
RFE: missing sport and dport from NETFILTER_PKT audit log

#162 mvasi90 opened 5 months ago
1
GH: build(deps): bump requests from 2.31.0 to 2.32.0 in /drivers/gpu/drm/ci/xfails

#161 dependabot[bot] closed 6 months ago
2
GH: build(deps): bump idna from 3.4 to 3.7 in /drivers/gpu/drm/ci/xfails

#160 dependabot[bot] closed 6 months ago
2
BUG: rename events on paths having special characters has incorrect records

#158 naugustine98 closed 8 months ago
1
BUG: read event is not generated when reading is performed via a symlink

#157 naugustine98 closed 9 months ago
1
BUG: rename event has incorrect records

#156 naugustine98 opened 9 months ago
2
BUG: audit init message shows 0-second timestamp on aarch64

#155 rgbriggs opened 1 year ago
2
BUG: error receiving audit netlink packet (No buffer space available)

#154 sulphur opened 1 year ago
3
RFE: fsconfig missing info

#153 stevegrubb opened 1 year ago
0
RFE: fsopen missing info

#152 stevegrubb opened 1 year ago
0
RFE: clone3() syscall needs a dedicated record

#151 stevegrubb opened 1 year ago
0
Q: pervasive security.capability xattr reads

#150 hanwen closed 1 year ago
2
Q: adding system call monitoring rule on aarch64 fails

#149 seemakumar8 opened 1 year ago
2
BUG: audit log

#148 hqh2010 opened 1 year ago
8
Q: why does the kernel audit module not record the absolute path of the file

#147 hqh2010 closed 1 year ago
8
Q/BUG: cannot disable Ubuntu kernel's audit system via auditctl

#146 sfbahr closed 1 year ago
3
RFE: improve filtering events by exe for containers

#145 RChernov opened 1 year ago
2
Q/BUG: process stuck in audit_backlog_wait for a longtime

#144 tuxoko opened 1 year ago
8
RFE: be able to filter out AVCs based on operation and "kmod" field

#143 rgbriggs opened 1 year ago
6
Q: elogind stops incrementing session ID after some uptime

#142 opty77 closed 1 year ago
4
RFE: support filtering by openat2(2) oflags

#141 cgzones opened 2 years ago
2
BUG: PATH record contains (null) for file descriptor operation

#140 cgzones opened 2 years ago
2
BUG: rules with 'exit' filter do not generate any audit events

#138 The-Mule closed 1 year ago
16
BUG: memory leak from __audit_log_kern_module()

#137 cgzones closed 2 years ago
4
RFE: provide a mechanism to shut down auditd with auid accountability via systemd

#136 rgbriggs opened 2 years ago
1
Q: can't add rules using '-a task,always -S fork'

#134 DeepseaXX closed 2 years ago
6
BUG: incorrect PARENT path when removing a folder with files

#133 Davack opened 2 years ago
8
BUG: ILP32 (ARM's take on x32) is not audited properly

#131 weiyuchen opened 3 years ago
18
auditd memory leak

#130 Nick-0314 closed 3 years ago
1
RFE: is it necessary for kernel reply to auditd with block mode in function netlink_unicast when auditd service is stopping

#129 e06620227 opened 3 years ago
3
BUG: inconsistent audit rule processing when adding/removing rules

#128 weiyuchen closed 3 years ago
3
BUG: incorrect handling of creation of subdirectories

#127 popov-nikita opened 4 years ago
1
Q/BUG: investigate use of task_pid_nr(...) vs task_tgid_nr(...)

#126 pcmoore opened 4 years ago
3
RFE: log known syscall parameters when seccomp() returns SECCOMP_RET_LOG

#125 max7255 closed 4 years ago
1
RFE: audit nftables configuration events

#124 rgbriggs closed 3 years ago
5
RFE: audit_log_n_untrustedstring() should not log a string with spaces as hex-encoded

#123 nefigtut closed 4 years ago
4
BUG: SOCKADDR record missing with required messages when no rules present

#122 rgbriggs opened 4 years ago
1
RFE: better message for map syscalls on lib with executable stack

#121 cgzones closed 4 years ago
3
BUG: accompanying records missing for requried records when no rules present

#120 rgbriggs closed 3 years ago
12
RFE: ftruncate(2) audit does not generate PATH entries

#119 opoplawski closed 4 years ago
3
BUG: auditd does not generate audit message when PATH cannot be resolved

#118 johntolson opened 5 years ago
3
RFE: avoid ausearch excessive disk IO when processing a log with a checkpoint

#117 mvpel closed 5 years ago
1
BUG: the name field in audit log does not have a relative path when deleting directory

#116 silverbullet49 opened 5 years ago
4
Got tones of log in one second by one command

#115 Tu-114-s-undercarriage closed 5 years ago
6