Al Viro
74c3cbe33b
[PATCH] audit: watching subtrees ...
New kind of audit rule predicates: "object is visible in given subtree".
The part that can be sanely implemented, that is. Limitations:
* if you have hardlink from outside of tree, you'd better watch
it too (or just watch the object itself, obviously)
* if you mount something under a watched tree, tell audit
that new chunk should be added to watched subtrees
* if you umount something in a watched tree and it's still mounted
elsewhere, you will get matches on events happening there. New command
tells audit to recalculate the trees, trimming such sources of false
positives.
Note that it's _not_ about path - if something mounted in several places
(multiple mount, bindings, different namespaces, etc.), the match does
_not_ depend on which one we are using for access.
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
2007-10-21 02:37:45 -04:00
ide: add CONFIG_IDE_ARCH_OBSOLETE_INIT
2007-10-20 00:32:32 +02:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/bunk/trivial
2007-10-19 20:36:17 -07:00
softlockup: make asm/irq_regs.h available on every platform
2007-10-17 08:42:47 -07:00
forbid asm/bitops.h direct inclusion
2007-10-19 11:53:41 -07:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/bunk/trivial
2007-10-19 20:36:17 -07:00
ide: add hwif->ack_intr hook
2007-10-20 00:32:32 +02:00
forbid asm/bitops.h direct inclusion
2007-10-19 11:53:41 -07:00
Linux Kernel Markers
2007-10-19 11:53:54 -07:00
include/asm-*/system.h: remove unused set_rmb(), set_wmb() macros
2007-10-20 02:30:47 +02:00
ide: add CONFIG_IDE_ARCH_OBSOLETE_INIT
2007-10-20 00:32:32 +02:00
ide: add CONFIG_IDE_ARCH_OBSOLETE_INIT
2007-10-20 00:32:32 +02:00
ide: add hwif->ack_intr hook
2007-10-20 00:32:32 +02:00
include/asm-*/system.h: remove unused set_rmb(), set_wmb() macros
2007-10-20 02:30:47 +02:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/bunk/trivial
2007-10-19 20:36:17 -07:00
Merge branch 'master' of hera.kernel.org:/pub/scm/linux/kernel/git/kyle/parisc-2.6
2007-10-20 20:19:15 -07:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/bunk/trivial
2007-10-19 20:36:17 -07:00
remove asm/bitops.h includes
2007-10-19 11:53:41 -07:00
forbid asm/bitops.h direct inclusion
2007-10-19 11:53:41 -07:00
Fix misspellings of "system", "controller", "interrupt" and "necessary".
2007-10-19 23:10:43 +02:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/bunk/trivial
2007-10-19 20:36:17 -07:00
ide: add CONFIG_IDE_ARCH_OBSOLETE_INIT
2007-10-20 00:32:32 +02:00
ide: add CONFIG_IDE_ARCH_OBSOLETE_INIT
2007-10-20 00:32:32 +02:00
forbid asm/bitops.h direct inclusion
2007-10-19 11:53:41 -07:00
include/asm-*/system.h: remove unused set_rmb(), set_wmb() macros
2007-10-20 02:30:47 +02:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/bunk/trivial
2007-10-19 20:36:17 -07:00
forbid asm/bitops.h direct inclusion
2007-10-19 11:53:41 -07:00
KEYS: Make request_key() and co fundamentally asynchronous
2007-10-17 08:42:57 -07:00
[PATCH] audit: watching subtrees
2007-10-21 02:37:45 -04:00
v4l: copy_to_user() is not a good method name
2007-10-13 09:58:59 -07:00
Spelling fix: explicitly
2007-10-19 23:22:55 +02:00
pcmcia: use DMA_MASK_NONE for the default for all pcmcia devices
2007-10-16 09:42:50 -07:00
do not export /usr/include/scsi in make headers_install
2007-10-17 08:42:52 -07:00
[ALSA] version 1.0.15
2007-10-16 16:57:46 +02:00
define global BIT macro
2007-10-19 11:53:42 -07:00
xen: fix incorrect vcpu_register_vcpu_info hypercall argument
2007-10-16 11:51:31 -07:00
do not export /usr/include/scsi in make headers_install
2007-10-17 08:42:52 -07:00
74c3cbe33b