Re: [PATCH ghak21 V2 0/4] audit: address ANOM_LINK excess records

2018-03-12 Thread Paul Moore
On Mon, Mar 12, 2018 at 11:17 AM, Steve Grubb wrote: > On Mon, 12 Mar 2018 02:31:16 -0400 > Richard Guy Briggs wrote: > >> Audit link denied events were being unexpectedly produced in a >> disjoint way when audit was disabled, and when they were expected, >> there were duplicate PATH records. Th

Re: [PATCH ghak21 V2 0/4] audit: address ANOM_LINK excess records

2018-03-12 Thread Steve Grubb
On Mon, 12 Mar 2018 02:31:16 -0400 Richard Guy Briggs wrote: > Audit link denied events were being unexpectedly produced in a > disjoint way when audit was disabled, and when they were expected, > there were duplicate PATH records. This patchset addresses both > issues for symlinks and hardlinks

Re: [PATCH ghak21 V2 0/4] audit: address ANOM_LINK excess records

2018-03-12 Thread Richard Guy Briggs
On 2018-03-12 02:31, Richard Guy Briggs wrote: > Audit link denied events were being unexpectedly produced in a disjoint > way when audit was disabled, and when they were expected, there were > duplicate PATH records. This patchset addresses both issues for > symlinks and hardlinks. > > This was

[PATCH ghak21 V2 0/4] audit: address ANOM_LINK excess records

2018-03-11 Thread Richard Guy Briggs
Audit link denied events were being unexpectedly produced in a disjoint way when audit was disabled, and when they were expected, there were duplicate PATH records. This patchset addresses both issues for symlinks and hardlinks. This was introduced with commit b24a30a7305418ff138ff51776fc