• Linus Torvalds's avatar
    Merge tag 'audit-pr-20200330' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit · 674d85eb
    Linus Torvalds authored
    Pull audit updates from Paul Moore:
     "We've got two audit patches for the v5.7 merge window with a stellar
      14 lines changed between the two patches. The patch descriptions are
      far more lengthy than the patches themselves, which is a very good
      thing for patches this size IMHO. The patches pass our test suites and
      a quick summary is below:
    
       - Stop logging inode information when updating an audit file watch.
    
         Since we are not changing the inode, or the fact that we are
         watching the associated file, the inode information is just noise
         that we can do without.
    
       - Fix a problem where mandatory audit records were missing their
         accompanying audit records (e.g. SYSCALL records were missing).
    
         The missing records often meant that we didn't have the necessary
         context to understand what was going on when the event occurred"
    
    * tag 'audit-pr-20200330' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit:
      audit: trigger accompanying records when no rules present
      audit: CONFIG_CHANGE don't log internal bookkeeping as an event
    674d85eb
audit.c 61.5 KB