[GIT PULL] Audit patches for v5.9

From: Paul Moore
Date: Mon Aug 03 2020 - 21:00:16 EST


Hi Linus,

Here are the audit patches for the v5.9 merge window. All of the
patches in this pull request pass our test suite and merged cleanly
with your tree from a few hours ago.

Aside from some smaller bug fixes, here are the highlights:

- Add a new backlog wait metric to the audit status message, this is
intended to help admins determine how long processes have been waiting
for the audit backlog queue to clear

- Generate audit records for nftables configuration changes

- Generate CWD audit records for for the relevant LSM audit records

Please merge for v5.9, thanks,
-Paul

--
The following changes since commit b3a9e3b9622ae10064826dccb4f7a52bd88c7407:

Linux 5.8-rc1 (2020-06-14 12:45:04 -0700)

are available in the Git repository at:

git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git
tags/audit-pr-20200803

for you to fetch changes up to b43870c74f3fdf0cd06bf5f1b7a5ed70a2cd4ed2:

audit: report audit wait metric in audit status reply
(2020-07-21 11:21:44 -0400)

----------------------------------------------------------------
audit/stable-5.9 PR 20200803

----------------------------------------------------------------
Gustavo A. R. Silva (1):
audit: Use struct_size() helper in alloc_chunk

Max Englander (1):
audit: report audit wait metric in audit status reply

Paul Moore (1):
audit: use the proper gfp flags in the audit_log_nfcfg() calls

Richard Guy Briggs (5):
audit: log nftables configuration change events
audit: add gfp parameter to audit_log_nfcfg
audit: remove unused !CONFIG_AUDITSYSCALL __audit_inode* stubs
audit: issue CWD record to accompany LSM_AUDIT_DATA_* records
audit: purge audit_log_string from the intra-kernel audit API

include/linux/audit.h | 46 +++++++++++------
include/uapi/linux/audit.h | 18 ++++---
kernel/audit.c | 39 +++++++++-----
kernel/audit_tree.c | 4 +-
kernel/auditsc.c | 45 +++++++++++++---
net/bridge/netfilter/ebtables.c | 6 +--
net/netfilter/nf_tables_api.c | 112 ++++++++++++++++++++++++++++++++++++
net/netfilter/x_tables.c | 5 +-
security/apparmor/audit.c | 10 ++--
security/apparmor/file.c | 25 +++------
security/apparmor/ipc.c | 46 ++++++++---------
security/apparmor/net.c | 14 ++---
security/lsm_audit.c | 9 +++-
13 files changed, 273 insertions(+), 106 deletions(-)

--
paul moore
www.paul-moore.com