Re: [PATCH] audit: add task history record
Paul Moore <[email protected]> Wed, 16 Aug 2023 09:53:58 -0400
| Newsgroups | com.redhat.linux-audit,org.kernel.vger.audit,org.kernel.vger.linux-security-module |
|---|---|
| Message-ID | <CAHC9VhSz=3utr_CigGvkMEb6_avJUQq1Ak2smB7neSd76mzjFw@mail.gmail.com> |
T24gV2VkLCBBdWcgMTYsIDIwMjMgYXQgNjoxMOKAr0FNIFRldHN1byBIYW5kYQo8cGVuZ3Vpbi1r ZXJuZWxAaS1sb3ZlLnNha3VyYS5uZS5qcD4gd3JvdGU6Cj4gT24gMjAyMy8wOC8xNiAzOjQ0LCBQ YXVsIE1vb3JlIHdyb3RlOgo+ID4gT24gRnJpLCBBdWcgMTEsIDIwMjMgYXQgNjo1OOKAr0FNIFRl dHN1byBIYW5kYQo+ID4gPHBlbmd1aW4ta2VybmVsQGktbG92ZS5zYWt1cmEubmUuanA+IHdyb3Rl Ogo+ID4+Cj4gPj4gV2hlbiBhbiB1bmV4cGVjdGVkIHN5c3RlbSBldmVudCBvY2N1cnMsIHRoZSBh ZG1pbmlzdHJhdG9yIG1heSB3YW50IHRvCj4gPj4gaWRlbnRpZnkgd2hpY2ggYXBwbGljYXRpb24g dHJpZ2dlcmVkIHRoZSBldmVudC4gRm9yIGV4YW1wbGUsIHVuZXhwZWN0ZWQKPiA+PiBwcm9jZXNz IHRlcm1pbmF0aW9uIGlzIHN0aWxsIGEgcmVhbCBjb25jZXJuIGVub3VnaCB0byB3cml0ZSBhcnRp Y2xlcwo+ID4+IGxpa2UgaHR0cHM6Ly9hY2Nlc3MucmVkaGF0LmNvbS9zb2x1dGlvbnMvMTY1OTkz IC4KPiA+Pgo+ID4+IFRoaXMgcGF0Y2ggYWRkcyBhIHJlY29yZCB3aGljaCBlbWl0cyBUT01PWU8t bGlrZSB0YXNrIGhpc3RvcnkgaW5mb3JtYXRpb24KPiA+PiBpbnRvIHRoZSBhdWRpdCBsb2dzIGZv ciBiZXR0ZXIgdW5kZXJzdGFuZGluZyBvZiB1bmV4cGVjdGVkIHN5c3RlbSBldmVudHMuCj4gPj4K PiA+PiAgIHR5cGU9VU5LTk9XTlsxMzQwXSBtc2c9YXVkaXQoMTY5MTc1MDczOC4yNzE6MTA4KTog aGlzdG9yeT0ibmFtZT1zd2FwcGVyLzA7cGlkPTE7c3RhcnQ9MjAyMzA4MTExOTQzMjk9Pm5hbWU9 aW5pdDtwaWQ9MTtzdGFydD0yMDIzMDgxMTE5NDM0Mz0+bmFtZT1zeXN0ZW1kO3BpZD0xO3N0YXJ0 PTIwMjMwODExMTk0NDM5PT5uYW1lPXNzaGQ7cGlkPTM2NjA7c3RhcnQ9MjAyMzA4MTExMDQ1MDQ9 Pm5hbWU9c3NoZDtwaWQ9Mzc2NztzdGFydD0yMDIzMDgxMTEwNDUzNSIKPiA+Cj4gPiBXaGlsZSBJ IHJlc3BlY3QgeW91ciBwZXJzaXN0ZW5jZSwgd2UndmUgdGFsa2VkIGFib3V0IHRoaXMgcXVpdGUg YSBiaXQKPiA+IGFscmVhZHkgaW4gb3RoZXIgdGhyZWFkcy4gIFdoYXQgeW91IGFyZSB0cnlpbmcg dG8gZG8gaXMgYWxyZWFkeQo+ID4gcG9zc2libGUgd2l0aCBhdWRpdAo+Cj4gSG93PwoKSWYgeW91 IGNvbmZpZ3VyZSBhdWRpdCB0byByZWNvcmQgZXhlYygpIGFuZCBmcmllbmRzIHlvdSBzaG91bGQg aGF2ZSBhCnByb3BlciBoaXN0b3J5IG9mIHRoZSBwcm9jZXNzZXMgc3RhcnRlZCBvbiB0aGUgc3lz dGVtLgoKPiA+ICAgICAgICAgICAgICAgICAgICAgYW5kL29yIFRPTU9ZTyBlbmFibGVkIGFuZCBj b25maWd1cmVkCj4KPiBXcm9uZy4gU2luY2Ugbm90IGFsbCBMU00gaG9va3MgYWxsb3cgc2xlZXBp bmcsIFRPTU9ZTyBpcyB1bmFibGUgdG8KPiBjaGVjayBzZW5kaW5nIHNpZ25hbHMuIEFsc28sIFRP TU9ZTyBpcyBub3QgdXNpbmcgYXVkaXQgaW50ZXJmYWNlLgoKSSBzYWlkICJhdWRpdCBhbmQvb3Ig VE9NT1lPIjsgSSBiZWxpZXZlIHRoZSAiYW5kL29yIiBpcyBpbXBvcnRhbnQuICBJZgpJIHJlY2Fs bCBjb3JyZWN0bHksIGFuZCBwZXJoYXBzIEkgbWlzdW5kZXJzdG9vZCB5b3UsIHlvdSBjb25jZWRl ZCB0aGF0CmEgY29tYmluYXRpb24gb2YgYXVkaXQgKmFuZC9vciogVE9NT1lPIHdvdWxkIHNvbHZl IHRoaXMgaXNzdWUuCgo+ID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgc28gSSBzZWUgbm8KPiA+IHJlYXNvbiB3aHkgd2Ugd2FudCB0byBt ZXJnZSB0aGlzLgo+Cj4gVGhpcyBjb2RlIG1ha2VzIGl0IHBvc3NpYmxlIHRvIHJlY29yZCBzZW5k aW5nIHNpZ25hbHMgd2l0aCBUT01PWU8tbGlrZSBjb250ZXh0LAo+IGFuZCB3ZSBjYW4gYXZvaWQg YXNzaWduaW5nIExTTSBJRCBmb3IgdGhpcyBjb2RlIGlmIHdlIGNhbiBtZXJnZSB0aGlzIGNvZGUg YXMKPiBhIHBhcnQgb2YgYXVkaXQuCgpJZiB5b3Ugd2FudCBUT01PWU8tbGlrZSBpbmZvcm1hdGlv biwgcnVuIFRPTU9ZTy4gIElmIHlvdXIgcHJlZmVycmVkCmRpc3RyaWJ1dGlvbiBkb2Vzbid0IHN1 cHBvcnQgVE9NT1lPLCB5b3UgbmVlZCB0byBlaXRoZXIgYXNrIHRoZW0gdG8Kc3VwcG9ydCBpdCwg ZmluZCBhIG5ldyBkaXN0cmlidXRpb24gdGhhdCBkb2VzLCBvciBidWlsZCB5b3VyIG93bgprZXJu ZWwuCgo+ID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBJIHVuZGVyc3RhbmQg eW91ciBmcnVzdHJhdGlvbiB0aGF0Cj4gPiBUT01PWU8gaXMgbm90IGVuYWJsZWQgYnkgeW91ciBw cmVmZXJlZCBkaXN0cmlidXRpb24sIGJ1dCBhZGRpbmcKPiA+IGFkZGl0aW9uYWwgKGFuZCBhcmd1 YWJseSByZWR1bmRhbnQgY29kZSkgY29kZSB0byB0aGUgdXBzdHJlYW0ga2VybmVsCj4gPiBpcyBu b3QgYSBzb2x1dGlvbiBJIGFtIHdpbGxpbmcgdG8gc3VwcG9ydCBhbmQgbWFpbnRhaW4gbG9uZyB0 ZXJtLgo+Cj4gTmV2ZXIgYSByZWR1bmRhbnQgY29kZS4gQWJzb2x1dGVseSBubyByZWFzb24gd2Ug ZG9uJ3Qgd2FudCB0byBtZXJnZS4KCkF0IHRoaXMgcG9pbnQgaW4gdGltZSwgSSBvYnZpb3VzbHkg ZGlzYWdyZWUuCgo+IFRoZSBvbmx5IGNob2ljZSBpcyB3aGljaCBhcHByb2FjaCAoYSBzdGFuZGFs b25lIExTTSBtb2R1bGUgb3IgYSBwYXJ0IG9mIGF1ZGl0KQo+IHRvIGdvLiBDYXNleSBzdWdnZXN0 cyB0aGlzIGNvZGUgYXMgYSBwYXJ0IG9mIGF1ZGl0LiBZb3UgbXVzdCBwZXJzdWFkZSBDYXNleQo+ IGlmIHlvdSBkb24ndCB3YW50IHRoaXMgY29kZSBhcyBhIHBhcnQgb2YgYXVkaXQuCgpUbyBiZSB2 ZXJ5IGNsZWFyLCBpdCBpc24ndCBteSBkdXR5IHRvIHBlcnN1YWRlIENhc2V5IGFib3V0IGFueXRo aW5nCihhbHRob3VnaCBpZiB5b3UndmUgZm9sbG93ZWQgdGhlIExTTSBzdGFja2luZyBzYWdhIHlv dSBrbm93IEkndmUKZGVmaW5pdGVseSB0cmllZCBvbiBvY2Nhc2lvbiEgPGc+KS4gIE15IHJvbGUg aGVyZSBpcyB0byBtYWludGFpbiB0aGUKYXVkaXQgc3Vic3lzdGVtIGFuZCBMU00gbGF5ZXIgKGFs b25nIHdpdGggb3RoZXJzIHdoaWNoIGFyZW4ndCByZWxldmFudApoZXJlKSB0byB0aGUgYmVzdCBv ZiBteSBhYmlsaXR5LiAgQSBiaWcgcGFydCBvZiB0aGF0IGlzIGVuc3VyaW5nIHdlCm1ha2UgInNt YXJ0IGRlY2lzaW9ucyIgd2l0aCByZXNwZWN0IHRvIHdoYXQgY29kZSB3ZSBtZXJnZSBhcyB0aGlu Z3MKbGlrZSBuZXcgTFNNcyBhbmQgbmV3IGF1ZGl0IHJlY29yZHMgYXJlIHRoaW5ncyB0aGF0IHdl IGhhdmUgdG8gc3VwcG9ydAoqZm9yZXZlciouICBCZWNhdXNlIG9mIHRoaXMgcmF0aGVyIGV4dHJl bWUgc3VwcG9ydCBidXJkZW4gSSBuZWVkIHRvCm1ha2Ugc3VyZSB0aGF0IHdlIGFyZW4ndCBtYWtp bmcgb3VyIGpvYnMgKGN1cnJlbnQgZGV2ZWxvcGVycywgY3VycmVudAptYWludGFpbmVycywgYW5k IHRob3NlIHRoYXQgd2lsbCBmb2xsb3cgdXMpIG1vcmUgZGlmZmljdWx0IHRoYW4KYWJzb2x1dGVs eSBuZWNlc3NhcnkuICBGcm9tIG15IGN1cnJlbnQgcGVyc3BlY3RpdmUsIHRoZSBiZW5lZml0cyBv Zgp0aGlzIHBhdGNoLCBib3RoIGluIHRlcm1zIG9mIHVuaXF1ZSBmdW5jdGlvbmFsaXR5IGFuZCBk dXJhYmlsaXR5IG9mCnRoZSBkZXNpZ24vY29kZSwgYXJlIG5vdCBlbm91Z2ggdG8gb3V0d2VpZ2gg dGhlIHN1cHBvcnQgYnVyZGVuLgoKLS0gCnBhdWwtbW9vcmUuY29tCgotLQpMaW51eC1hdWRpdCBt YWlsaW5nIGxpc3QKTGludXgtYXVkaXRAcmVkaGF0LmNvbQpodHRwczovL2xpc3RtYW4ucmVkaGF0 LmNvbS9tYWlsbWFuL2xpc3RpbmZvL2xpbnV4LWF1ZGl0Cg==