Received-SPF: softfail (google.com: domain of transitioning linux-kernel-owner@vger.kernel.org does not designate 23.128.96.19 as permitted sender) client-ip=23.128.96.19;
MIME-Version: 1.0
From:   Paul Moore <paul@paul-moore.com>
Date:   Mon, 21 Mar 2022 18:21:08 -0400
Message-ID: <CAHC9VhTdj=86GwGpv5bgwVrQp0v1o-a=YKKDw-vC_Er8uKBizA@mail.gmail.com>
Subject: [GIT PULL] Audit patches for v5.18
To:     Linus Torvalds <torvalds@linux-foundation.org>
Cc:     linux-audit@redhat.com, linux-kernel@vger.kernel.org
Content-Type: text/plain; charset="UTF-8"
Precedence: bulk

Linus,

Just one audit patch queued for v5.18:

- Change the AUDIT_TIME_* record generation so that they are generated
at syscall exit time and subject to all of the normal syscall exit
filtering.  This should help reduce noise and ensure those records
which are most relevant to the admin's audit configuration are
recorded in the audit log.

Please merge,
-Paul

--
The following changes since commit e783362eb54cd99b2cac8b3a9aeac942e6f6ac07:

 Linux 5.17-rc1 (2022-01-23 10:12:53 +0200)

are available in the Git repository at:

 https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git
   tags/audit-pr-20220321

for you to fetch changes up to 272ceeaea355214b301530e262a0df8600bfca95:

 audit: log AUDIT_TIME_* records only from rules
   (2022-02-22 13:51:40 -0500)

----------------------------------------------------------------
audit/stable-5.18 PR 20220321

----------------------------------------------------------------
Richard Guy Briggs (1):
     audit: log AUDIT_TIME_* records only from rules

kernel/audit.h   |  4 +++
kernel/auditsc.c | 87 +++++++++++++++++++++++++++++++++++++++-----------
2 files changed, 71 insertions(+), 20 deletions(-)

-- 
paul-moore.com