[PATCH v7 0/2] audit: improve NETFILTER_PKT records
Ricardo Robaina <[email protected]>
| Newsgroups | org.kernel.vger.audit,org.kernel.vger.linux-kernel,org.kernel.vger.netfilter-devel |
|---|---|
| Message-ID | <[email protected]> |
Currently, NETFILTER_PKT records lack source and destination port information, which is often valuable for troubleshooting. This patch series adds ports numbers, to NETFILTER_PKT records. The first patch refactors netfilter-related code, by moving duplicated code to audit.c, by creating audit_log_nf_skb() helper function. The second one, improves the NETFILTER_PKT records, by including source and destination ports for protocols of interest. Ricardo Robaina (2): audit: add audit_log_nf_skb helper function audit: include source and destination ports to NETFILTER_PKT include/linux/audit.h | 8 ++ kernel/audit.c | 159 +++++++++++++++++++++++++++++++++++++++ net/netfilter/nft_log.c | 58 +------------- net/netfilter/xt_AUDIT.c | 58 +------------- 4 files changed, 169 insertions(+), 114 deletions(-) -- 2.51.1