Re: [PATCH] audit: add task history record
Paul Moore <[email protected]> Thu, 24 Aug 2023 13:02:28 -0400
| Newsgroups | com.redhat.linux-audit,org.kernel.vger.audit,org.kernel.vger.linux-security-module |
|---|---|
| Message-ID | <CAHC9VhSa6XDoie1=ZcqDc9=F2q8JGn2bu6-AwMGcZ=HEzBYK5w@mail.gmail.com> |
T24gVGh1LCBBdWcgMjQsIDIwMjMgYXQgMTE6NTXigK9BTSBTdGV2ZSBHcnViYiA8c2dydWJiQHJl ZGhhdC5jb20+IHdyb3RlOgo+IE9uIFRodXJzZGF5LCBBdWd1c3QgMjQsIDIwMjMgOTozMDoxMCBB TSBFRFQgUGF1bCBNb29yZSB3cm90ZToKPiA+IE9uIFRodSwgQXVnIDI0LCAyMDIzIGF0IDk6MjHi gK9BTSBUZXRzdW8gSGFuZGEKPiA+IDxwZW5ndWluLWtlcm5lbEBpLWxvdmUuc2FrdXJhLm5lLmpw PiB3cm90ZToKPiA+ID4gT24gMjAyMy8wOC8yMyAyMzo0OCwgUGF1bCBNb29yZSB3cm90ZToKPiA+ ID4gPiBXZSd2ZSBhbHJlYWR5IGRpc2N1c3NlZCB0aGlzIGJvdGggZnJvbSBhIGtlcm5lbCBsb2Fk IHBlcnNwZWN0aXZlIChpdAo+ID4gPiA+IHNob3VsZCBiZSBhYmxlIHRvIGhhbmRsZSB0aGUgbG9h ZCwgaWYgbm90IHRoYXQgaXMgYSBzZXBhcmF0ZSBwcm9ibGVtCj4gPiA+ID4gdG8gYWRkcmVzcykg YXMgd2VsbCBhcyB0aGUgaHVtYW4gcGVyc3BlY3RpdmUgKGlmIHlvdSB3YW50IGF1ZGl0aW5nLAo+ ID4gPiA+IHlvdSBuZWVkIHRvIGJlIGFibGUgdG8gaGFuZGxlIGF1ZGl0aW5nKS4KPiA+ID4KPiA+ ID4gTm8uIFlvdSBoYXZlbid0IHNob3duIHVzIGF1ZGl0IHJ1bGVzIHRoYXQgY2FuIHNhdGlzZnkg cmVxdWlyZW1lbnRzIHNob3duCj4gPiA+IGJlbG93Lj4KPiA+ID4gICAoMSkgQ2F0Y2ggX2FsbF8g cHJvY2VzcyBjcmVhdGlvbnMgKGJvdGggdmlhIGZvcmsoKS9jbG9uZSgpIHN5c3RlbSBjYWxscwo+ ID4gPiAgIGFuZCBrdGhyZWFkX2NyZWF0ZSgpIGZyb20gdGhlIGtlcm5lbCksIGFuZCBkdXBsaWNh dGUgdGhlIGhpc3RvcnkgdXBvbgo+ID4gPiAgIHByb2Nlc3MgY3JlYXRpb24uCj4gPgo+ID4gQ3Jl YXRlIGFuIGF1ZGl0IGZpbHRlciBydWxlIHRvIHJlY29yZCB0aGUgc3lzY2FsbHMgeW91IGFyZSBp bnRlcmVzdGVkCj4gPiBpbiBsb2dnaW5nLgo+ID4KPiA+ID4gICAoMikgQ2F0Y2ggX2FsbF8gZXhl Y3ZlKCksIGFuZCB1cGRhdGUgdGhlIGhpc3RvcnkgdXBvbiBzdWNjZXNzZnVsCj4gPiA+ICAgZXhl Y3ZlKCkuCj4gPgo+ID4gQ3JlYXRlIGFuIGF1ZGl0IGZpbHRlciBydWxlIHRvIHJlY29yZCB0aGUg c3lzY2FsbHMgeW91IGFyZSBpbnRlcmVzdGVkCj4gPiBpbiBsb2dnaW5nLgo+ID4KPiA+ID4gICAo MykgQ2F0Y2ggX2FsbF8gcHJvY2VzcyB0ZXJtaW5hdGlvbnMgKGJvdGggZXhpdCgpL2V4aXRfZ3Jv dXAoKS9raWxsKCkKPiA+ID4gICBzeXN0ZW0gIGNhbGxzIGFuZCBpbnRlcm5hbCByZWFzb25zIHN1 Y2ggYXMgT09NIGtpbGxlciksIGFuZCBlcmFzZSB0aGUKPiA+ID4gICBoaXN0b3J5IHVwb24gcHJv Y2VzcyB0ZXJtaW5hdGlvbi4KPiA+Cj4gPiBDcmVhdGUgYW4gYXVkaXQgZmlsdGVyIHJ1bGUgdG8g cmVjb3JkIHRoZSBldmVudHMgeW91IGFyZSBpbnRlcmVzdGVkIGluCj4gPiBsb2dnaW5nLCBpZiB0 aGVyZSBpcyBhbiBldmVudCB3aGljaCBpc24ndCBiZWluZyByZWNvcmRlZCBmZWVsIGZyZWUgdG8K PiA+IHN1Ym1pdCBhIHBhdGNoIHRvIGdlbmVyYXRlIGFuIGF1ZGl0IHJlY29yZC4KPgo+IEknbSBu b3QgZm9yIG9yIGFnYWluc3QgdGhpcyBvciBhIHNpbWlsYXIgcGF0Y2guCgpUaGF0IHdhcyBteSBp bXByZXNzaW9uIGJhc2VkIG9uIHlvdXIgcHJldmlvdXMgY29tbWVudHMsIG15IG9waW5pb24KcmVt YWlucyB1bmNoYW5nZWQuCgo+IFRoZSBpbmZvcm1hdGlvbiBUZXRzdW8gaXMKPiBsb29raW5nIGZv ciBjYW5ub3QgYmUgcmVjcmVhdGVkIGZyb20gbG9ncy4gV2hhdCBpZiBpdCB3ZXJlIGEgZGFlbW9u IHRoYXQncwo+IGJlZW4gcnVubmluZyBmb3IgYSB5ZWFyPyBXaXRoIHRoZSBhbW91bnQgb2YgZGF0 YSB5b3UgYXJlIHN1Z2dlc3RpbmcgdG8gbG9nLAo+IGl0IHdvdWxkIGhhdmUgcm90YXRlZCBhd2F5 IG1vbnRocyBhZ28uCgpKdXN0IGJlY2F1c2UgaXQgcmVxdWlyZXMgY29uZmlndXJhdGlvbiBhbmQv b3IgYSB3YXkgb2YgbWFpbnRhaW5pbmcgbG9nCmluZm9ybWF0aW9uIG92ZXIgYSBwZXJpb2Qgb2Yg dGltZSBkb2VzIG5vdCBtZWFuIGl0ICJjYW5ub3QiIGJlIGRvbmUuCkkgYWxzbyBzdXNwZWN0IHRo YXQgdGhlIG51bWJlciBvZiB3ZWxsIG1hbmFnZWQsIGFuZCBwcm9wZXJseSB1cGRhdGVkCnN5c3Rl bXMgdGhhdCBoYXZlIHVwdGltZXMgb3ZlciBhIHllYXIgYXJlIGluY3JlYXNpbmdseSByYXJlLiAg WWVzLAp0aGVyZSBhcmUgc3lzdGVtcyB3aXRoIHVwdGltZXMgbXVjaCBsb25nZXIgdGhhbiB0aGF0 LCBidXQgbXkgYXJndW1lbnQKaXMgdGhhdCB0aG9zZSBzeXN0ZW1zIGFyZSBub3QgbGlrZWx5IGFz IHNlY3VyaXR5IGZvY3VzZWQgYXMgdGhleSBtYXkKY2xhaW0uCgo+IFRvIGxvZyBhbGwgb2YgdGhl IHN5c3RlbSBjYWxscyB5b3UKPiBtZW50aW9uIHdvdWxkIGJlIGFidXNpdmUgb2YgdGhlIGF1ZGl0 IHN5c3RlbSwgaHVydCBwZXJmb3JtYW5jZSwgd2VhciBvdXQgU1NECj4gZHJpdmVzLCBhbmQgdWx0 aW1hdGVseSBmYWlsLgoKVGhhbmsgeW91IGZvciB5b3VyIGlucHV0LiAgSXQgaXMgY2xlYXIgdGhh dCB3ZSBoYXZlIGRpZmZlcmVudCBvcGluaW9ucwpvbiB0aGlzIG1hdHRlci4KCj4gVGhlcmUgbWF5 IGJlIG90aGVyIHJlYXNvbnMgeW91IGRvbid0IGxpa2UgdGhlIHBhdGNoIGFuZCB0aGF0J3MgZmlu ZS4gQnV0Cj4gc2F5aW5nIGl0IGNhbiBiZSBkb25lIGZyb20gdXNlciBzcGFjZSBhZnRlciB0aGUg ZmFjdCBpcyBub3QgaGVscGZ1bC4KCkFyZ3VhYmx5IHlvdXIgY2hvaWNlIHRvIHJlaW50cm9kdWNl IGFyZ3VtZW50cyB5b3UgaGF2ZSBwcmV2aW91c2x5Cm1hZGUsIHdoaWNoIEkgYmVsaWV2ZSBJJ3Zl IGFuc3dlcmVkLCBpcyBhbHNvIG5vdCBoZWxwZnVsLCB5ZXQgaGVyZSB3ZQphcmUuCgotLSAKcGF1 bC1tb29yZS5jb20KCi0tCkxpbnV4LWF1ZGl0IG1haWxpbmcgbGlzdApMaW51eC1hdWRpdEByZWRo YXQuY29tCmh0dHBzOi8vbGlzdG1hbi5yZWRoYXQuY29tL21haWxtYW4vbGlzdGluZm8vbGludXgt YXVkaXQK