Received: by 10.223.185.116 with SMTP id b49csp7826053wrg; Thu, 1 Mar 2018 11:48:25 -0800 (PST) X-Google-Smtp-Source: AG47ELsTUxl6aOEY901twvrULGfhdDpj0NQZp7S1+bwGTJb0mRl4k2TY+Kw1OF86Q1r+g4psVB+g X-Received: by 10.99.189.82 with SMTP id d18mr2464808pgp.172.1519933705274; Thu, 01 Mar 2018 11:48:25 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1519933705; cv=none; d=google.com; s=arc-20160816; b=vj1fvM6jHGxyXlRCxIQOcAtgs2Qzkwijo8rzpQD8soB1VrzNdqEnv7F/SJjyHAr39u F1cYCFbTNXKuiCYJdbzl/423a+odqNxg0kiYwGxcJ3J0LB4rcSfPm6/9ZKLg8VE3tO9A SlvjnNYkNcgeu9mBtfvC6lkwyDZe7ycz3FXT2v/jPk9UNUaq5CUWGVaMW9sK2Fks2zZf 7/YncnVFf30oRr3H885ZJYMdxHUYtzm+anS1fO2juk9JlDx6LoQtNU78+QLDHLHdRt5R YV/Kw8I7dMJEHbGb3+rz4/odbN7BAPi6jqvP6pDpcr1LeokZyuFzWdmQLRe9quwgsraz jf6A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:references:in-reply-to:references :in-reply-to:message-id:date:subject:cc:to:from :arc-authentication-results; bh=JntHDlpJ1qMB/nWGaBnf2OGSodMR4qhX9RzDdm+ovpI=; b=lQM0GfdoKdEq6RmEFEvStFWcVP9peu6a6t5zU8H4Mc6T8c/G18oXxUVJra4q9CQ2BY MvhHSbUfEts4y+v+qq9dNoNp9Z7Y97AeES1Kco6A3WiyC1JNvmmE0JTuuWcCDTCJwtf2 EmooumLC+aDKJbotE7MD6dDVvu4pmoAHZ1deUOc/cViap2QMJU29kcknx5Phmx4w6S7k 5ZbpxPJkOofy1xBmmKS33ZZL42oW8KNmcEY9ro7ADUqeesxdC/tabwtdZHUDqZMD/zyV xePpNGlf47SrBhHwNZ6QPWYqngNdhpTNXzATtp5ESF1Qk8yQJ+IHkbR00hVidgLQp1NY RKSw== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=redhat.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id v11si3442933pff.189.2018.03.01.11.48.10; Thu, 01 Mar 2018 11:48:25 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=redhat.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1034194AbeCATrO (ORCPT + 99 others); Thu, 1 Mar 2018 14:47:14 -0500 Received: from mx3-rdu2.redhat.com ([66.187.233.73]:46758 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1161460AbeCATrC (ORCPT ); Thu, 1 Mar 2018 14:47:02 -0500 Received: from smtp.corp.redhat.com (int-mx05.intmail.prod.int.rdu2.redhat.com [10.11.54.5]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id D953E7D852; Thu, 1 Mar 2018 19:47:01 +0000 (UTC) Received: from madcap2.tricolour.ca (ovpn-112-12.rdu2.redhat.com [10.10.112.12]) by smtp.corp.redhat.com (Postfix) with ESMTP id C73FA9C07A; Thu, 1 Mar 2018 19:46:58 +0000 (UTC) From: Richard Guy Briggs To: cgroups@vger.kernel.org, containers@lists.linux-foundation.org, linux-api@vger.kernel.org, Linux-Audit Mailing List , linux-fsdevel@vger.kernel.org, LKML , netdev@vger.kernel.org Cc: mszeredi@redhat.com, luto@kernel.org, jlayton@redhat.com, carlos@redhat.com, viro@zeniv.linux.org.uk, dhowells@redhat.com, simo@redhat.com, trondmy@primarydata.com, eparis@parisplace.org, serge@hallyn.com, ebiederm@xmission.com, madzcar@gmail.com, Richard Guy Briggs Subject: [RFC PATCH V1 08/12] audit: add containerid support for tty_audit Date: Thu, 1 Mar 2018 14:41:11 -0500 Message-Id: <2542bf0c5446777b0d47fc16a7864212f13d2f4a.1519930146.git.rgb@redhat.com> In-Reply-To: References: In-Reply-To: References: X-Scanned-By: MIMEDefang 2.79 on 10.11.54.5 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.11.55.2]); Thu, 01 Mar 2018 19:47:02 +0000 (UTC) X-Greylist: inspected by milter-greylist-4.5.16 (mx1.redhat.com [10.11.55.2]); Thu, 01 Mar 2018 19:47:02 +0000 (UTC) for IP:'10.11.54.5' DOMAIN:'int-mx05.intmail.prod.int.rdu2.redhat.com' HELO:'smtp.corp.redhat.com' FROM:'rgb@redhat.com' RCPT:'' Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Add container ID information to tty logging rule standalone records. Signed-off-by: Richard Guy Briggs --- drivers/tty/tty_audit.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/drivers/tty/tty_audit.c b/drivers/tty/tty_audit.c index e30aa6b..48ee4b7 100644 --- a/drivers/tty/tty_audit.c +++ b/drivers/tty/tty_audit.c @@ -66,8 +66,9 @@ static void tty_audit_log(const char *description, dev_t dev, uid_t uid = from_kuid(&init_user_ns, task_uid(tsk)); uid_t loginuid = from_kuid(&init_user_ns, audit_get_loginuid(tsk)); unsigned int sessionid = audit_get_sessionid(tsk); + struct audit_context *context = audit_alloc_local(); - ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_TTY); + ab = audit_log_start(context, GFP_KERNEL, AUDIT_TTY); if (ab) { char name[sizeof(tsk->comm)]; @@ -80,6 +81,8 @@ static void tty_audit_log(const char *description, dev_t dev, audit_log_n_hex(ab, data, size); audit_log_end(ab); } + audit_log_container_info(context, "tty", audit_get_containerid(tsk)); + audit_free_context(context); } /** -- 1.8.3.1