Re: [RFC Part1 PATCH 00/20 v2] Add namespace support for audit

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Quoting Gao feng (gaofeng@xxxxxxxxxxxxxx):
> Hi
> 
> On 10/24/2013 03:31 PM, Gao feng wrote:
> > Here is the v1 patchset: http://lwn.net/Articles/549546/
> > 
> > The main target of this patchset is allowing user in audit
> > namespace to generate the USER_MSG type of audit message,
> > some userspace tools need to generate audit message, or
> > these tools will broken.
> > 
> 
> I really need this feature, right now,some process such as
> logind are broken in container becase we leak of this feature.

Your set doesn't address loginuid though right?  How exactly do you
expect to do that?  If user violates MAC policy and audit msg is
sent to init user ns by mac subsys, you need the loginuid from
init_audit_ns.  where will that be stored if you allow updates
of loginuid in auditns?
_______________________________________________
Containers mailing list
Containers@xxxxxxxxxxxxxxxxxxxxxxxxxx
https://lists.linuxfoundation.org/mailman/listinfo/containers




[Index of Archives]     [Cgroups]     [Netdev]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Bugtraq]     [Yosemite Forum]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux Admin]     [Samba]

  Powered by Linux