Re: [PATCH] audit: add task history record
Paul Moore <[email protected]> Fri, 18 Aug 2023 10:59:18 -0400
| Newsgroups | com.redhat.linux-audit,org.kernel.vger.audit,org.kernel.vger.linux-security-module |
|---|---|
| Message-ID | <CAHC9VhTj-PQ0qPTiphPLXyJx3bWeqgVS_GPCWNgjqFqBgH6Njg@mail.gmail.com> |
T24gRnJpLCBBdWcgMTgsIDIwMjMgYXQgNjozMOKAr0FNIFRldHN1byBIYW5kYQo8cGVuZ3Vpbi1r ZXJuZWxAaS1sb3ZlLnNha3VyYS5uZS5qcD4gd3JvdGU6Cj4gT24gMjAyMy8wOC8xNiAyMjo1Mywg UGF1bCBNb29yZSB3cm90ZToKPiA+IE9uIFdlZCwgQXVnIDE2LCAyMDIzIGF0IDY6MTDigK9BTSBU ZXRzdW8gSGFuZGEKPiA+IDxwZW5ndWluLWtlcm5lbEBpLWxvdmUuc2FrdXJhLm5lLmpwPiB3cm90 ZToKPiA+PiBPbiAyMDIzLzA4LzE2IDM6NDQsIFBhdWwgTW9vcmUgd3JvdGU6Cj4gPj4+IE9uIEZy aSwgQXVnIDExLCAyMDIzIGF0IDY6NTjigK9BTSBUZXRzdW8gSGFuZGEKPiA+Pj4gPHBlbmd1aW4t a2VybmVsQGktbG92ZS5zYWt1cmEubmUuanA+IHdyb3RlOgo+ID4+Pj4KPiA+Pj4+IFdoZW4gYW4g dW5leHBlY3RlZCBzeXN0ZW0gZXZlbnQgb2NjdXJzLCB0aGUgYWRtaW5pc3RyYXRvciBtYXkgd2Fu dCB0bwo+ID4+Pj4gaWRlbnRpZnkgd2hpY2ggYXBwbGljYXRpb24gdHJpZ2dlcmVkIHRoZSBldmVu dC4gRm9yIGV4YW1wbGUsIHVuZXhwZWN0ZWQKPiA+Pj4+IHByb2Nlc3MgdGVybWluYXRpb24gaXMg c3RpbGwgYSByZWFsIGNvbmNlcm4gZW5vdWdoIHRvIHdyaXRlIGFydGljbGVzCj4gPj4+PiBsaWtl IGh0dHBzOi8vYWNjZXNzLnJlZGhhdC5jb20vc29sdXRpb25zLzE2NTk5MyAuCj4gPj4+Pgo+ID4+ Pj4gVGhpcyBwYXRjaCBhZGRzIGEgcmVjb3JkIHdoaWNoIGVtaXRzIFRPTU9ZTy1saWtlIHRhc2sg aGlzdG9yeSBpbmZvcm1hdGlvbgo+ID4+Pj4gaW50byB0aGUgYXVkaXQgbG9ncyBmb3IgYmV0dGVy IHVuZGVyc3RhbmRpbmcgb2YgdW5leHBlY3RlZCBzeXN0ZW0gZXZlbnRzLgo+ID4+Pj4KPiA+Pj4+ ICAgdHlwZT1VTktOT1dOWzEzNDBdIG1zZz1hdWRpdCgxNjkxNzUwNzM4LjI3MToxMDgpOiBoaXN0 b3J5PSJuYW1lPXN3YXBwZXIvMDtwaWQ9MTtzdGFydD0yMDIzMDgxMTE5NDMyOT0+bmFtZT1pbml0 O3BpZD0xO3N0YXJ0PTIwMjMwODExMTk0MzQzPT5uYW1lPXN5c3RlbWQ7cGlkPTE7c3RhcnQ9MjAy MzA4MTExOTQ0Mzk9Pm5hbWU9c3NoZDtwaWQ9MzY2MDtzdGFydD0yMDIzMDgxMTEwNDUwND0+bmFt ZT1zc2hkO3BpZD0zNzY3O3N0YXJ0PTIwMjMwODExMTA0NTM1Igo+ID4+Pgo+ID4+PiBXaGlsZSBJ IHJlc3BlY3QgeW91ciBwZXJzaXN0ZW5jZSwgd2UndmUgdGFsa2VkIGFib3V0IHRoaXMgcXVpdGUg YSBiaXQKPiA+Pj4gYWxyZWFkeSBpbiBvdGhlciB0aHJlYWRzLiAgV2hhdCB5b3UgYXJlIHRyeWlu ZyB0byBkbyBpcyBhbHJlYWR5Cj4gPj4+IHBvc3NpYmxlIHdpdGggYXVkaXQKPiA+Pgo+ID4+IEhv dz8KPiA+Cj4gPiBJZiB5b3UgY29uZmlndXJlIGF1ZGl0IHRvIHJlY29yZCBleGVjKCkgYW5kIGZy aWVuZHMgeW91IHNob3VsZCBoYXZlIGEKPiA+IHByb3BlciBoaXN0b3J5IG9mIHRoZSBwcm9jZXNz ZXMgc3RhcnRlZCBvbiB0aGUgc3lzdGVtLgo+Cj4gVGhhdCBpcyBhICJObyBMU00gbW9kdWxlcyBv dGhlciB0aGFuIFNFTGludXggaXMgbmVlZGVkIGJlY2F1c2UgU0VMaW51eCBjYW4gZG8KPiBldmVy eXRoaW5nIiBhc3NlcnRpb24uCgpFeGNlcHQgd2UgYXJlIG5vdCB0YWxraW5nIFNFTGludXggb3Ig TFNNcyBoZXJlLCB3ZSBhcmUgdGFsa2luZyBhYm91dAphdWRpdCBhbmQgdGhlIGF1ZGl0IHN1YnN5 c3RlbSBpcyB2ZXJ5IGRpZmZlcmVudCBmcm9tIHRoZSBMU00gbGF5ZXIuClRoZSBMU00gbGF5ZXIg aXMgZGVzaWduZWQgdG8gYmUgcGx1Z2dhYmxlIHdpdGggc3VwcG9ydCBmb3IgbXVsdGlwbGUKaW5k aXZpZHVhbCBMU01zLCB3aGVyZWFzIHRoZSBhdWRpdCBzdWJzeXN0ZW0gaXMgZGVzaWduZWQgdG8g c3VwcG9ydCBhCnNpbmdsZSBhdWRpdCBpbXBsZW1lbnRhdGlvbi4gIEl0IGlzIG15IG9waW5pb24g dGhhdCB0aGUgYXVkaXQgcGF0Y2gKeW91IGhhdmUgcHJvcG9zZWQgaGVyZSBkb2VzIG5vdCBwcm92 aWRlIGFuIGF1ZGl0IGFkbWluaXN0cmF0b3Igd2l0aAphbnkgbmV3IGNhcGFiaWxpdGllcyB0aGF0 IHRoZXkgZG8gbm90IGN1cnJlbnRseSBoYXZlIGFzIGFuIG9wdGlvbi4KClRoZXJlIGFyZSBhbHNv IGNvbmNlcm5zIGFyb3VuZCBmaWVsZCBmb3JtYXR0aW5nLCByZWNvcmQgbGVuZ3RoLCBldGMuLApi dXQgdGhvc2UgYXJlIHNlY29uZGFyeSBpc3N1ZXMgY29tcGFyZWQgdG8gdGhlIG1vcmUgaW1wb3J0 YW50IGlzc3VlIG9mCnJlZHVuZGFudCBmdW5jdGlvbmFsaXR5LgoKPiBQZW9wbGUgcHJvcG9zZSBk aWZmZXJlbnQgYXBwcm9hY2hlcy9pbXBsZW1lbnRhdGlvbnMgYmVjYXVzZQo+IHRoZXkgY2FuJ3Qg YWZmb3JkIHV0aWxpemluZy9jb25maWd1cmluZyBleGlzdGluZyBhcHByb2FjaGVzL2ltcGxlbWVu dGF0aW9ucy4KCkZyb20gd2hhdCBJJ3ZlIHNlZW4sIGJvdGggaW4gdGhpcyB0aHJlYWQgYXMgd2Vs bCBhcyB0aGUgb3RoZXIgcmVsYXRlZAp0aHJlYWRzIGZyb20geW91LCB0aGVzZSByZWNlbnQgZWZm b3J0cyBhcmUgZHVlIHRvIGEgbGFjayBvZiBUT01PWU8Kc3VwcG9ydCBpbiBtYWluc3RyZWFtIExp bnV4IGRpc3RyaWJ1dGlvbnMuICBNeSBhZHZpY2UgaXMgdG8gc3RvcAp0cnlpbmcgdG8gZHVwbGlj YXRlIHRoZSBUT01PWU8gZnVuY3Rpb25hbGl0eSBpbiBvdGhlciBzdWJzeXN0ZW1zL0xTTXMKYW5k IHN0YXJ0IHdvcmtpbmcgd2l0aCB0aGUgZGlzdHJpYnV0aW9ucyB0byBiZXR0ZXIgdW5kZXJzdGFu ZCB3aHkgdGhleQphcmUgbm90IHN1cHBvcnRpbmcgVE9NT1lPLiAgSSBiZWxpZXZlIHRoYXQgaWYg eW91IGNhbiBkZXRlcm1pbmUgd2h5CnRoZSBkaXN0cmlidXRpb25zIGFyZSBub3QgZW5hYmxpbmcg VE9NT1lPLCB5b3Ugc2hvdWxkIGJlIGFibGUgdG8KZGV2ZWxvcCBhIHBsYW4gdG8gYWRkcmVzcyB0 aG9zZSBpc3N1ZXMgYW5kIGV2ZW50dWFsbHkgZ2FpbgpkaXN0cmlidXRpb24gc3VwcG9ydCBmb3Ig VE9NT1lPLiAgSSB1bmRlcnN0YW5kIHRoYXQgc3VjaCBhbiBhcHByb2FjaAp3aWxsIGxpa2VseSBi ZSB0aW1lIGNvbnN1bWluZyBhbmQgZGlmZmljdWx0LCBidXQgSSB0aGluayB0aGF0IGlzIHlvdXIK YmVzdCBvcHRpb24gZm9yIHN1Y2Nlc3MuCgo+IFlvdXIgYXNzZXJ0aW9uIGlzIGEgZmF0YWwgcHJv YmxlbSBmb3IgbWVyZ2luZyAiUmU6IFtQQVRDSCB2MTMgMDAvMTFdIExTTTogVGhyZWUgYmFzaWMg c3lzY2FsbHMiCj4gYXQgaHR0cHM6Ly9sa21sLmtlcm5lbC5vcmcvci9DQUhDOVZoUTR0dGtTTFRC Q3JYTlpTQlIxRlA5VVpfZ1VIbW8wQlMzN0xDZHlCbVVleUFAbWFpbC5nbWFpbC5jb20gLgo+Cj4g UGxlYXNlIHBsZWFzZSBhbGxvdyBMU00gbW9kdWxlcyBsaWtlIGh0dHBzOi8vbGttbC5rZXJuZWwu b3JnL3IvNDFkMDMyNzEtZmY4YS05ODg4LTExZGUtYTdmNTNkYTQ3MzI4QEktbG92ZS5TQUtVUkEu bmUuanAKPiB0byBvYnRhaW4gYSBzdGFibGUgTFNNIElECgpXZSd2ZSBhbHJlYWR5IGRpc2N1c3Nl ZCB0aGF0IGluIHRoZSBUYXNrVHJhY2tlciB0aHJlYWQuCgo+IGlmIHlvdSBkb24ndCB3YW50IHRv IHN1cHBvcnQgc29tZXRoaW5nIHRoYXQgcG9zc2libHkgaGF2ZSBhbiBhbHRlcm5hdGl2ZS4KCldl J3ZlIGFscmVhZHkgdXBzdHJlYW1lZCBhbiBhbHRlcm5hdGl2ZSBhcHByb2FjaCB0byBUYXNrVHJh Y2tlcjogVE9NT1lPLgoKLS0gCnBhdWwtbW9vcmUuY29tCgotLQpMaW51eC1hdWRpdCBtYWlsaW5n IGxpc3QKTGludXgtYXVkaXRAcmVkaGF0LmNvbQpodHRwczovL2xpc3RtYW4ucmVkaGF0LmNvbS9t YWlsbWFuL2xpc3RpbmZvL2xpbnV4LWF1ZGl0Cg==