linux-audit audit-kernel issues

linux-audit / audit-kernel

GitHub mirror of the Linux Kernel's audit repository

https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git

Other

140 stars 37 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

BUG: op ignored on several string fields

#114 rgbriggs closed 5 years ago
3
BUG: INTEGRITY_POLICY_RULE violates audit message format

#113 rgbriggs opened 5 years ago
0
RFE: get rid of unnecessary list_empty() checks in auditfilter and auditsc code

#112 rgbriggs closed 5 years ago
4
BUG: make signal info available regardless of syscall auditing

#111 rgbriggs closed 5 years ago
4
BUG: connect AUDIT_LOGIN record to its syscall event

#110 rgbriggs closed 5 years ago
5
BUG: integrity evm_write_xattrs missing audit context and normalization

#109 rgbriggs closed 5 years ago
4
BUG: make best effort to identify null path records

#108 rgbriggs opened 5 years ago
1
RFE: remove unused actx parameter from audit_rule_match

#107 rgbriggs closed 5 years ago
3
RFE: join tty events to their syscall records

#106 rgbriggs closed 5 years ago
2
BUG: audit_context isn't needed when !CONFIG_AUDITSYSCALL

#105 rgbriggs closed 5 years ago
7
BUG: loginuid and sessionid invalid when !CONFIG_AUDITSYSCALL

#104 rgbriggs closed 5 years ago
3
RFE: support for v3 namespaced file capabilities

#103 stevegrubb closed 5 years ago
4
RFE: better handling of audit events to kmsg when only a multicast subscriber is listening

#102 rgbriggs opened 5 years ago
14
RFE: shorten PATH cap_f* values when zero

#101 rgbriggs closed 5 years ago
3
BUG: client hangs on missing mount resource

#100 rgbriggs closed 5 years ago
7
BUG: argc sometimes larger than the number of arg fields in EXECVE records

#99 stevegrubb closed 6 years ago
5
RFE: add network namespace ID to NETFILTER_CFG records

#98 rgbriggs closed 6 years ago
1
RFE: honor the "quiet" kernel command line option

#97 pcmoore closed 6 years ago
3
RFE: add CWD for file-related LSM_AUDIT_DATA_*

#96 rgbriggs closed 3 years ago
14
BUG: PATH records log wrong path for *at() syscalls (with dirfd != AT_FDCWD)

#95 WOnder93 opened 6 years ago
1
BUG: watches on executable symlinks are not working

#94 stevegrubb opened 6 years ago
11
RFE: run multiple audit daemons on one machine

#93 rgbriggs opened 6 years ago
0
RFE: log potential containers involved in namespace events

#92 rgbriggs opened 6 years ago
6
RFE: add a method to filter audit events based on audit container identifier

#91 rgbriggs opened 6 years ago
10
RFE: implement an audit container identifier

#90 rgbriggs opened 6 years ago
24
RFE: rename FILTER_TYPE to FILTER_EXCL

#89 rgbriggs closed 6 years ago
4
RFE: tie ANOM_ABEND records to syscall

#88 rgbriggs closed 6 years ago
3
RFE: tie SECCOMP records to syscall

#87 rgbriggs closed 6 years ago
3
RFE: switch to consistent boolean use of AUDIT_OFF

#86 rgbriggs closed 6 years ago
3
RFE: Improve supported feature reporting

#85 WOnder93 opened 6 years ago
1
RFE: remove audit_log_string() from kernel's internal audit API

#84 stevegrubb closed 3 years ago
4
BUG: ausearch does not reliably find nodes when date is specified

#83 ghost closed 6 years ago
3
BUG: inconsistent usage of current/tsk in audit_filter_rules

#82 WOnder93 closed 6 years ago
2
RFE: group all audit task parameters together

#81 rgbriggs closed 5 years ago
7
RFE: tie FEATURE_CHANGE records to syscall

#80 rgbriggs closed 6 years ago
16
RFE: add net namespace ID to NETFILTER_CFG records

#79 rgbriggs opened 6 years ago
0
Q: remove CONFIG_AUDIT_ARCH_COMPAT_GENERIC

#78 pcmoore opened 6 years ago
0
RFE: UUID For Parent/Child PID's

#77 aconite33 opened 6 years ago
12
BUG: memory pressure can cause kernel panic on feature change

#76 rgbriggs closed 6 years ago
3
RFE: audit daemon message routing based on container ID

#75 rgbriggs opened 6 years ago
0
BUG: bad "audit=?" kernel command line can result in silent panic

#74 pcmoore closed 6 years ago
1
Q: investigate tighter restrictions in audit_field_valid(...)

#73 pcmoore closed 5 years ago
6
Q: PATH records started logging capability information

#72 stevegrubb closed 6 years ago
16
RFE: improved SECCOMP record filtering

#71 stevegrubb closed 6 years ago
2
Q: AUDIT_KERN_MODULE uses "name" field

#70 stevegrubb closed 6 years ago
4
BUG: error resetting the audit daemon PID

#69 pcmoore closed 6 years ago
1
BUG: auditd logs for clone syscall shows exit code as container namespace pid of child process instead of host namespace pid

#68 madzcar opened 7 years ago
7
BUG: kernel header updates needed for 'auditctl -F perm' usage

#67 stevegrubb opened 7 years ago
7
BUG: the kernel does not initialize audit before forking PID 1

#66 pcmoore closed 6 years ago
8
RFE: ARG_PATH record

#65 stevegrubb opened 7 years ago
1

Previous Next