[lkml]   [2014]   [Feb]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
Subject[PATCH 0/5][RFC][v3] steps to make audit pid namespace-safe
This patchset is a revival of some of Eric Biederman's work to make audit

In a couple of places, audit was printing PIDs in the task's pid namespace
rather than relative to the audit daemon's pid namespace, which currently is

It also allows processes to log audit user messages in their own pid
namespaces, which was not previously permitted. Please see:

Part of the cleanup here involves deprecating task->pid and task->tgid, which
should be accessed using their respective helper functions.


Richard Guy Briggs (5):
pid: get pid_t ppid of task in init_pid_ns
audit: convert PPIDs to the inital PID namespace.
audit: store audit_pid as a struct pid pointer
audit: anchor all pid references in the initial pid namespace
audit: allow user processes to log from another PID namespace

drivers/tty/tty_audit.c | 3 +-
include/linux/sched.h | 18 ++++++++++
kernel/audit.c | 59 ++++++++++++++++++++++++----------
kernel/audit.h | 4 +-
kernel/auditfilter.c | 17 +++++++++-
kernel/auditsc.c | 24 +++++++------
security/integrity/integrity_audit.c | 2 +-
security/lsm_audit.c | 11 ++++--
8 files changed, 101 insertions(+), 37 deletions(-)

 \ /
  Last update: 2014-02-19 22:41    [W:0.517 / U:0.400 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site