Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S935639Ab3FTDM6 (ORCPT ); Wed, 19 Jun 2013 23:12:58 -0400 Received: from cn.fujitsu.com ([222.73.24.84]:8003 "EHLO song.cn.fujitsu.com" rhost-flags-OK-FAIL-OK-OK) by vger.kernel.org with ESMTP id S935534Ab3FTDM5 (ORCPT ); Wed, 19 Jun 2013 23:12:57 -0400 X-IronPort-AV: E=Sophos;i="4.87,901,1363104000"; d="scan'208";a="7610095" Message-ID: <51C27266.3060909@cn.fujitsu.com> Date: Thu, 20 Jun 2013 11:09:26 +0800 From: Gao feng User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130402 Thunderbird/17.0.5 MIME-Version: 1.0 To: Eric Paris CC: containers@lists.linux-foundation.org, serge.hallyn@ubuntu.com, linux-kernel@vger.kernel.org, linux-audit@redhat.com, ebiederm@xmission.com, matthltc@linux.vnet.ibm.com, sgrubb@redhat.com Subject: Re: [Part1 PATCH 00/22] Add namespace support for audit References: <1371606834-5802-1-git-send-email-gaofeng@cn.fujitsu.com> <20130619204927.GJ3212@redhat.com> <1371675095.16587.5.camel@dhcp137-13.rdu.redhat.com> <51C270AF.1080902@cn.fujitsu.com> In-Reply-To: <51C270AF.1080902@cn.fujitsu.com> X-MIMETrack: Itemize by SMTP Server on mailserver/fnst(Release 8.5.3|September 15, 2011) at 2013/06/20 11:06:41, Serialize by Router on mailserver/fnst(Release 8.5.3|September 15, 2011) at 2013/06/20 11:06:47, Serialize complete at 2013/06/20 11:06:47 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=ISO-8859-1 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 672 Lines: 13 On 06/20/2013 11:02 AM, Gao feng wrote: > If we don't tie audit to user namespace, there is still one problem. One more problem. some audit messages are generated by some net subsystem such as netfilter. If we don't tie audit to user namespace, we have no idea where these audit messages should go. there is no relationship between net namespace and audit namespace while we can get user namespace through net user namespace. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/