Re: [PATCH] audit: add task history record
Paul Moore <[email protected]> Mon, 21 Aug 2023 12:35:53 -0400
| Newsgroups | com.redhat.linux-audit,org.kernel.vger.audit,org.kernel.vger.linux-security-module |
|---|---|
| Message-ID | <CAHC9VhRaUxN=oEyKCOrfrGzJeXDGxv2EKbZH3qwAB6AhKcSfog@mail.gmail.com> |
T24gU2F0LCBBdWcgMTksIDIwMjMgYXQgMzowOeKAr0FNIFRldHN1byBIYW5kYQo8cGVuZ3Vpbi1r ZXJuZWxAaS1sb3ZlLnNha3VyYS5uZS5qcD4gd3JvdGU6Cj4gT24gMjAyMy8wOC8xOCAyMzo1OSwg UGF1bCBNb29yZSB3cm90ZToKPiA+IEV4Y2VwdCB3ZSBhcmUgbm90IHRhbGtpbmcgU0VMaW51eCBv ciBMU01zIGhlcmUsIHdlIGFyZSB0YWxraW5nIGFib3V0Cj4gPiBhdWRpdCBhbmQgdGhlIGF1ZGl0 IHN1YnN5c3RlbSBpcyB2ZXJ5IGRpZmZlcmVudCBmcm9tIHRoZSBMU00gbGF5ZXIuCj4gPiBUaGUg TFNNIGxheWVyIGlzIGRlc2lnbmVkIHRvIGJlIHBsdWdnYWJsZSB3aXRoIHN1cHBvcnQgZm9yIG11 bHRpcGxlCj4gPiBpbmRpdmlkdWFsIExTTXMsIHdoZXJlYXMgdGhlIGF1ZGl0IHN1YnN5c3RlbSBp cyBkZXNpZ25lZCB0byBzdXBwb3J0IGEKPiA+IHNpbmdsZSBhdWRpdCBpbXBsZW1lbnRhdGlvbi4g IEl0IGlzIG15IG9waW5pb24gdGhhdCB0aGUgYXVkaXQgcGF0Y2gKPiA+IHlvdSBoYXZlIHByb3Bv c2VkIGhlcmUgZG9lcyBub3QgcHJvdmlkZSBhbiBhdWRpdCBhZG1pbmlzdHJhdG9yIHdpdGgKPiA+ IGFueSBuZXcgY2FwYWJpbGl0aWVzIHRoYXQgdGhleSBkbyBub3QgY3VycmVudGx5IGhhdmUgYXMg YW4gb3B0aW9uLgo+Cj4gQmVmb3JlIGV4cGxhaW5pbmcgd2h5IGFuIGF1ZGl0IGFkbWluaXN0cmF0 b3IgY2Fubm90IGFmZm9yZCBlbXVsYXRpbmcKPiB0aGlzIHBhdGNoLCBJIGV4cGxhaW4gd2hhdCB0 aGlzIHBhdGNoIHdpbGwgZG8uCj4KPiBUaGVyZSBhcmUgdGhyZWUgc3lzdGVtIGNhbGxzIGZvciBt YW5hZ2luZyBhIHByb2Nlc3M6IGZvcmsoKS9leGVjdmUoKS9leGl0KCkuCj4KPiAgIGh0dHBzOi8v SS1sb3ZlLlNBS1VSQS5uZS5qcC90b21veW8vZm9yay5naWYKPiAgIGh0dHBzOi8vSS1sb3ZlLlNB S1VSQS5uZS5qcC90b21veW8vZXhlY3ZlLmdpZgo+ICAgaHR0cHM6Ly9JLWxvdmUuU0FLVVJBLm5l LmpwL3RvbW95by9leGl0LmdpZgo+Cj4gQXMgYSByZXN1bHQsIGhpc3Rvcnkgb2YgYSBwcm9jZXNz IGNhbiBiZSByZXByZXNlbnRlZCBhcyBhIHRyZWUsIHdoZXJlIHRoZQo+IHJvb3Qgb2YgdGhlIHRy ZWUgaXMgdGhlIGtlcm5lbCB0aHJlYWQgd2hpY2ggaXMgc3RhcnRlZCBieSB0aGUgYm9vdCBsb2Fk ZXIuCj4KPiAgIGh0dHBzOi8vSS1sb3ZlLlNBS1VSQS5uZS5qcC90b21veW8vcmFpbHdheS5naWYK Pgo+IFRoaXMgZnVuZGFtZW50YWwgbWVjaGFuaXNtIGNhbm5vdCBiZSBjaGFuZ2VkIGFzIGxvbmcg YXMgTGludXggcmVtYWlucyBhcyBhCj4gVW5peC1saWtlIE9TLiBUaGF0IGlzLCBhZGRpbmcgdGhp cyBpbmZvcm1hdGlvbiB3aWxsIG5vdCBjYXVzZSB3aGF0IHlvdSBjYWxsCj4gInRoZSBzdXBwb3J0 IGJ1cmRlbiIgLi4uCgpBbnkgbmV3IGZ1bmN0aW9uYWxpdHkgYWRkZWQgdG8gdGhlIGtlcm5lbCwg ZXNwZWNpYWxseSB1c2VyIHZpc2libGUKZnVuY3Rpb25hbGl0eSBvciBzb21lIHNvcnQgb2YgaW50 ZXJmYWNlLCBhZGRzIGEgc3VwcG9ydCBidXJkZW4uCk5vdGhpbmcgaXMgImZyZWUiLgoKPiA+IFRo ZXJlIGFyZSBhbHNvIGNvbmNlcm5zIGFyb3VuZCBmaWVsZCBmb3JtYXR0aW5nLCByZWNvcmQgbGVu Z3RoLCBldGMuLAo+ID4gYnV0IHRob3NlIGFyZSBzZWNvbmRhcnkgaXNzdWVzIGNvbXBhcmVkIHRv IHRoZSBtb3JlIGltcG9ydGFudCBpc3N1ZSBvZgo+ID4gcmVkdW5kYW50IGZ1bmN0aW9uYWxpdHku Cj4KPiBJZiBzb21lb25lIHRyaWVzIHRvIGVtdWxhdGUgdGhpcyBwYXRjaCwgd2UgbmVlZCB0byBi ZSBhYmxlIHRvIHRyYWNlIGFsbAo+IGZvcmsoKS9leGVjdmUoKS9leGl0KCkgc3lzdGVtIGNhbGxz LiBPciwgdGhlIGhpc3RvcnkgdHJlZSB3aWxsIGJlIGJyb2tlbi4KPgo+IElmIGFuIGF1ZGl0IGFk bWluaXN0cmF0b3IgdHJpZXMgdG8gZW11bGF0ZSB0aGlzIHBhdGNoIHVzaW5nIHN5c3RlbSBjYWxs Cj4gYXVkaXRpbmcgZnVuY3Rpb25hbGl0eSwgd2UgbmVlZCB0byBtYWtlIHN1cmUgdGhhdAo+Cj4g ICAiYXVkaXRjdGwgLUQiIG11c3Qgbm90IGNsZWFyIHJ1bGVzIGZvciB0cmFjaW5nIGZvcmsoKS9l eGVjdmUoKS9leGl0KCkKPiAgIHN5c3RlbSBjYWxscy4gVGhpcyBpcyBpbXBvc3NpYmxlIGJlY2F1 c2UgdGhpcyBjaGFuZ2Ugd2lsbCBicmVhayB1c2Vyc3BhY2UKPiAgIHByb2dyYW1zIGV4cGVjdGlu ZyB0aGF0ICJhdWRpdGN0bCAtRCIgY2xlYXJzIGFsbCBydWxlcy4KCkl0J3MgYSBnb29kIHRoaW5n IHRoYXQgJ2F1ZHRpY3RsIC1kIC4uLicgZXhpc3RzIHNvIHRoYXQgb25lIGNhbgpzZWxlY3RpdmVs eSBkZWxldGUgYXVkaXQgcnVsZXMgZnJvbSB0aGUga2VybmVsLiAgSWYgc29tZW9uZSB3YW50cyB0 bwpwcmVzZXJ2ZSBzcGVjaWZpYyBhdWRpdCBydWxlcywgdGhhdCBpcyB0aGUgd2F5IHRvIGRvIGl0 OyAnYXVkaXRjdGwgLUQnCmlzIGEgdmVyeSBjb2Fyc2UgdG9vbCBhbmQgbm90IHNvbWV0aGluZyB0 aGF0IGlzIGxpa2VseSB2ZXJ5IHVzZWZ1bCBmb3IKdXNlcnMgd2l0aCBzdHJpY3QgYXVkaXRpbmcg cmVxdWlyZW1lbnRzLgoKPiAgIFJ1bGVzIGZvciB0cmFjaW5nIGZvcmsoKS9leGVjdmUoKS9leGl0 KCkgc3lzdGVtIGNhbGxzIG11c3QgYmUgZW5hYmxlZAo+ICAgd2hlbiB0aGUga2VybmVsIHRocmVh ZCB3aGljaCBpcyBzdGFydGVkIGJ5IHRoZSBib290IGxvYWRlciBzdGFydHMuCj4gICBIb3cgY2Fu IHdlIGVtYmVkIHN1Y2ggc3lzdGVtIGNhbGwgYXVkaXRpbmcgcnVsZXMgaW50byB0aGUga2VybmVs IGFuZAo+ICAgdGVsbCB3aGV0aGVyIHRvIGVuYWJsZSB0aGVzZSBydWxlcyB1c2luZyB0aGUga2Vy bmVsIGNvbW1hbmQgbGluZSBvcHRpb25zPwoKSSB3b3VsZCBib290IHRoZSBzeXN0ZW0gd2l0aCAn YXVkaXQ9MScgb24gdGhlIGtlcm5lbCBjb21tYW5kIGxpbmUgYW5kCmVuc3VyZSB0aGF0IHlvdXIg ZGVzaXJlZCBhdWRpdCBydWxlcyBhcmUgbG9hZGVkIGFzIGVhcmx5IGluIHRoZSBib290CnByb2Nl c3MgYXMgcG9zc2libGUsIGJlZm9yZSBhbnkgbG9uZy1ydW5uaW5nIHByb2Nlc3Nlcy9kYWVtb25z L2xvZ2lucwphcmUgc3RhcnRlZC4gIEhvbmVzdGx5LCB0aGF0J3Mgc2ltcGx5IGEgZ29vZCBiZXN0 IHByYWN0aWNlIGZvciBhbnlvbmUKd2hvIGNhcmVzIGFib3V0IG1haW50YWluaW5nIGEgcHJvcGVy IGF1ZGl0IGxvZywgaW5kZXBlbmRlbnQgb2YgdGhlCnNwZWNpZmljIHVzZSBjYXNlIGhlcmUuCgo+ ICAgSW4gb3JkZXIgdG8gYXZvaWQgcG9zc2liaWxpdHkgb2YgbG9vc2luZyBmb3JrKCkvZXhlY3Zl KCkvZXhpdCgpIHJlY29yZHMsCj4gICBhdWRpdGQgbXVzdCBub3QgYmUgc3RvcHBlZCBldmVuIHRl bXBvcmFyaWx5LiBXaG8gd2FudHMgdG8gZW5mb3JjZSBzdWNoCj4gICByZXF1aXJlbWVudCBpbiBv cmRlciB0byBiZSBhYmxlIHRvIG9idGFpbiBwcm9jZXNzIGhpc3RvcnkgaW5mb3JtYXRpb24/CgpB IHNpbGx5IGFtb3VudCBvZiB3b3JrIGhhcyBnb25lIGludG8gZW5zdXJpbmcgdGhhdCB0aGUgYXVk aXQgc3Vic3lzdGVtCmluIHRoZSBrZXJuZWwgZG9lc24ndCBsb3NlIHJlY29yZHMgd2hlbiBwcm9w ZXJseSBjb25maWd1cmVkLiAgSWYgeW91CmhhdmVuJ3QgYWxyZWFkeSwgSSB3b3VsZCBlbmNvdXJh Z2UgeW91IHRvIHJlYWQgdGhlIGF1ZGl0Y3RsKDgpIG1hbgpwYWdlIGFuZCBsb29rIGZvciB0aGUg cGFyYW1ldGVycyB0aGF0IGFkanVzdCB0aGUgYXVkaXQgYmFja2xvZwpjb25maWd1cmF0aW9uLgoK LS0gCnBhdWwtbW9vcmUuY29tCgotLQpMaW51eC1hdWRpdCBtYWlsaW5nIGxpc3QKTGludXgtYXVk aXRAcmVkaGF0LmNvbQpodHRwczovL2xpc3RtYW4ucmVkaGF0LmNvbS9tYWlsbWFuL2xpc3RpbmZv L2xpbnV4LWF1ZGl0Cg==