Re: [PATCH ghak21 V2 3/4] audit: add refused symlink to audit_names

2018-03-13 Thread Richard Guy Briggs
On 2018-03-13 16:24, Paul Moore wrote: > On Tue, Mar 13, 2018 at 6:52 AM, Richard Guy Briggs wrote: > > On 2018-03-13 11:38, Steve Grubb wrote: > >> On Tue, 13 Mar 2018 06:11:08 -0400 > >> Richard Guy Briggs wrote: > >> > >> > On 2018-03-13 09:35, Steve Grubb wrote: > >> > > On Mon, 12 Mar 2018 1

Re: [PATCH ghak21 V2 3/4] audit: add refused symlink to audit_names

2018-03-13 Thread Paul Moore
On Tue, Mar 13, 2018 at 6:52 AM, Richard Guy Briggs wrote: > On 2018-03-13 11:38, Steve Grubb wrote: >> On Tue, 13 Mar 2018 06:11:08 -0400 >> Richard Guy Briggs wrote: >> >> > On 2018-03-13 09:35, Steve Grubb wrote: >> > > On Mon, 12 Mar 2018 11:52:56 -0400 >> > > Richard Guy Briggs wrote: >> >

Re: [PATCH ghak21 V2 3/4] audit: add refused symlink to audit_names

2018-03-13 Thread Steve Grubb
On Tue, 13 Mar 2018 06:52:51 -0400 Richard Guy Briggs wrote: > On 2018-03-13 11:38, Steve Grubb wrote: > > On Tue, 13 Mar 2018 06:11:08 -0400 > > Richard Guy Briggs wrote: > > > > > On 2018-03-13 09:35, Steve Grubb wrote: > > > > On Mon, 12 Mar 2018 11:52:56 -0400 > > > > Richard Guy Briggs

Re: [PATCH ghak21 V2 3/4] audit: add refused symlink to audit_names

2018-03-13 Thread Richard Guy Briggs
On 2018-03-13 11:38, Steve Grubb wrote: > On Tue, 13 Mar 2018 06:11:08 -0400 > Richard Guy Briggs wrote: > > > On 2018-03-13 09:35, Steve Grubb wrote: > > > On Mon, 12 Mar 2018 11:52:56 -0400 > > > Richard Guy Briggs wrote: > > > > > > > On 2018-03-12 11:53, Paul Moore wrote: > > > > > On M

Re: [PATCH ghak21 V2 3/4] audit: add refused symlink to audit_names

2018-03-13 Thread Steve Grubb
On Tue, 13 Mar 2018 06:11:08 -0400 Richard Guy Briggs wrote: > On 2018-03-13 09:35, Steve Grubb wrote: > > On Mon, 12 Mar 2018 11:52:56 -0400 > > Richard Guy Briggs wrote: > > > > > On 2018-03-12 11:53, Paul Moore wrote: > > > > On Mon, Mar 12, 2018 at 11:26 AM, Richard Guy Briggs > > > >

Re: [PATCH ghak21 V2 3/4] audit: add refused symlink to audit_names

2018-03-13 Thread Richard Guy Briggs
On 2018-03-13 09:35, Steve Grubb wrote: > On Mon, 12 Mar 2018 11:52:56 -0400 > Richard Guy Briggs wrote: > > > On 2018-03-12 11:53, Paul Moore wrote: > > > On Mon, Mar 12, 2018 at 11:26 AM, Richard Guy Briggs > > > wrote: > > > > On 2018-03-12 11:12, Paul Moore wrote: > > > >> On Mon, Mar 12

Re: [PATCH ghak21 V2 3/4] audit: add refused symlink to audit_names

2018-03-13 Thread Steve Grubb
On Mon, 12 Mar 2018 11:52:56 -0400 Richard Guy Briggs wrote: > On 2018-03-12 11:53, Paul Moore wrote: > > On Mon, Mar 12, 2018 at 11:26 AM, Richard Guy Briggs > > wrote: > > > On 2018-03-12 11:12, Paul Moore wrote: > > >> On Mon, Mar 12, 2018 at 2:31 AM, Richard Guy Briggs > > >> wrote: >

Re: [PATCH ghak21 V2 3/4] audit: add refused symlink to audit_names

2018-03-12 Thread Paul Moore
On Mon, Mar 12, 2018 at 11:52 AM, Richard Guy Briggs wrote: > On 2018-03-12 11:53, Paul Moore wrote: >> On Mon, Mar 12, 2018 at 11:26 AM, Richard Guy Briggs wrote: >> > On 2018-03-12 11:12, Paul Moore wrote: >> >> On Mon, Mar 12, 2018 at 2:31 AM, Richard Guy Briggs >> >> wrote: >> >> > Audit li

Re: [PATCH ghak21 V2 3/4] audit: add refused symlink to audit_names

2018-03-12 Thread Richard Guy Briggs
On 2018-03-12 11:53, Paul Moore wrote: > On Mon, Mar 12, 2018 at 11:26 AM, Richard Guy Briggs wrote: > > On 2018-03-12 11:12, Paul Moore wrote: > >> On Mon, Mar 12, 2018 at 2:31 AM, Richard Guy Briggs > >> wrote: > >> > Audit link denied events for symlinks had duplicate PATH records rather > >>

Re: [PATCH ghak21 V2 3/4] audit: add refused symlink to audit_names

2018-03-12 Thread Paul Moore
On Mon, Mar 12, 2018 at 11:26 AM, Richard Guy Briggs wrote: > On 2018-03-12 11:12, Paul Moore wrote: >> On Mon, Mar 12, 2018 at 2:31 AM, Richard Guy Briggs wrote: >> > Audit link denied events for symlinks had duplicate PATH records rather >> > than just updating the existing PATH record. Update

Re: [PATCH ghak21 V2 3/4] audit: add refused symlink to audit_names

2018-03-12 Thread Richard Guy Briggs
On 2018-03-12 11:12, Paul Moore wrote: > On Mon, Mar 12, 2018 at 2:31 AM, Richard Guy Briggs wrote: > > Audit link denied events for symlinks had duplicate PATH records rather > > than just updating the existing PATH record. Update the symlink's PATH > > record with the current dentry and inode i

Re: [PATCH ghak21 V2 3/4] audit: add refused symlink to audit_names

2018-03-12 Thread Paul Moore
On Mon, Mar 12, 2018 at 2:31 AM, Richard Guy Briggs wrote: > Audit link denied events for symlinks had duplicate PATH records rather > than just updating the existing PATH record. Update the symlink's PATH > record with the current dentry and inode information. > > See: https://github.com/linux-a

[PATCH ghak21 V2 3/4] audit: add refused symlink to audit_names

2018-03-11 Thread Richard Guy Briggs
Audit link denied events for symlinks had duplicate PATH records rather than just updating the existing PATH record. Update the symlink's PATH record with the current dentry and inode information. See: https://github.com/linux-audit/audit-kernel/issues/21 Signed-off-by: Richard Guy Briggs --- f