Peter Krempa a71680fe92 audit: Audit resources used by VirtIO RNG ...

This patch adds auditing of resources used by Virtio RNG devices. Only
resources on the local filesystems are audited.

The audit logs look like:

For the 'random' backend:
type=VIRT_RESOURCE msg=audit(1363099126.643:31): pid=995252 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=rng reason=start vm="qcow-test" uuid=118733ed-b658-3e22-a2cb-4fe5cb3ddf79 old-rng="?" new-rng="/dev/random": exe="/home/pipo/libvirt/daemon/.libs/libvirtd" hostname=? addr=? terminal=pts/0 res=success'

For local character device source:
type=VIRT_RESOURCE msg=audit(1363100164.240:96): pid=995252 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=rng reason=start vm="qcow-test" uuid=118733ed-b658-3e22-a2cb-4fe5cb3ddf79 old-rng="?" new-rng="/tmp/unix.sock": exe="/home/pipo/libvirt/daemon/.libs/libvirtd" hostname=? addr=? terminal=pts/0 res=success'

2013-03-15 09:07:20 +01:00

..

capabilities.c

capabilities: add NUMA memory information

2013-03-08 11:51:00 -07:00

capabilities.h

virCaps: conf: start splitting out irrelevat data

2013-03-13 09:27:14 +01:00

cpu_conf.c

Rename virterror.c virterror_internal.h to virerror.{c,h}

2012-12-21 11:19:50 +00:00

cpu_conf.h

Rename xml.{c,h} to virxml.{c,h}

2012-12-21 11:19:50 +00:00

device_conf.c

Rename virterror.c virterror_internal.h to virerror.{c,h}

2012-12-21 11:19:50 +00:00

device_conf.h

Rename util.{c,h} to virutil.{c,h}

2012-12-21 11:19:49 +00:00

domain_audit.c

audit: Audit resources used by VirtIO RNG

2013-03-15 09:07:20 +01:00

domain_audit.h

Include pid namespace inode in LXC audit messages

2013-03-07 19:43:53 +00:00

domain_conf.c

virtio-rng: Add rate limiting options for virtio-RNG

2013-03-14 13:28:10 +01:00

domain_conf.h

virtio-rng: Add rate limiting options for virtio-RNG

2013-03-14 13:28:10 +01:00

domain_event.c

Rename virterror.c virterror_internal.h to virerror.{c,h}

2012-12-21 11:19:50 +00:00

domain_event.h

Add support for SUSPEND_DISK event

2012-10-15 12:09:10 +02:00

domain_nwfilter.c

maint: fix up copyright notice inconsistencies

2012-09-20 16:30:55 -06:00

domain_nwfilter.h

maint: fix up copyright notice inconsistencies

2012-09-20 16:30:55 -06:00

interface_conf.c

Rename virterror.c virterror_internal.h to virerror.{c,h}

2012-12-21 11:19:50 +00:00

interface_conf.h

Rename util.{c,h} to virutil.{c,h}

2012-12-21 11:19:49 +00:00

netdev_bandwidth_conf.c

Rename virterror.c virterror_internal.h to virerror.{c,h}

2012-12-21 11:19:50 +00:00

netdev_bandwidth_conf.h

Rename xml.{c,h} to virxml.{c,h}

2012-12-21 11:19:50 +00:00

netdev_vlan_conf.c

netdev_vlan_conf: Resolve memory leak found by Valgrind.

2013-02-07 14:08:14 -05:00

netdev_vlan_conf.h

Rename xml.{c,h} to virxml.{c,h}

2012-12-21 11:19:50 +00:00

netdev_vport_profile_conf.c

vport_profile_conf: Resolve memory leak found by Valgrind

2013-02-07 14:08:14 -05:00

netdev_vport_profile_conf.h

Rename xml.{c,h} to virxml.{c,h}

2012-12-21 11:19:50 +00:00

network_conf.c

Revert "Add support for <option> tag in network config"

2013-02-27 10:55:24 -05:00

network_conf.h

Revert "Add support for <option> tag in network config"

2013-02-27 10:55:24 -05:00

node_device_conf.c

Rename all PCI device functions to have a standard name prefix

2013-02-05 19:22:25 +00:00

node_device_conf.h

Rename all PCI device functions to have a standard name prefix

2013-02-05 19:22:25 +00:00

nwfilter_conf.c

Turn virDomainObjList into an opaque virObject

2013-02-05 15:49:25 +00:00

nwfilter_conf.h

Turn virDomainObjList into an opaque virObject

2013-02-05 15:49:25 +00:00

nwfilter_ipaddrmap.c

Rename virterror.c virterror_internal.h to virerror.{c,h}

2012-12-21 11:19:50 +00:00

nwfilter_ipaddrmap.h

maint: fix up copyright notice inconsistencies

2012-09-20 16:30:55 -06:00

nwfilter_params.c

Rename virterror.c virterror_internal.h to virerror.{c,h}

2012-12-21 11:19:50 +00:00

nwfilter_params.h

Rename buf.{c,h} to virbuffer.{c,h}

2012-12-21 11:17:12 +00:00

secret_conf.c

Rename virterror.c virterror_internal.h to virerror.{c,h}

2012-12-21 11:19:50 +00:00

secret_conf.h

Rename util.{c,h} to virutil.{c,h}

2012-12-21 11:19:49 +00:00

snapshot_conf.c

virCaps: conf: start splitting out irrelevat data

2013-03-13 09:27:14 +01:00

snapshot_conf.h

virCaps: conf: start splitting out irrelevat data

2013-03-13 09:27:14 +01:00

storage_conf.c

storage: cast -1 for uid_t|gid_t

2013-02-25 15:46:32 +01:00

storage_conf.h

Rename util.{c,h} to virutil.{c,h}

2012-12-21 11:19:49 +00:00

storage_encryption_conf.c

Rename virterror.c virterror_internal.h to virerror.{c,h}

2012-12-21 11:19:50 +00:00

storage_encryption_conf.h

Rename util.{c,h} to virutil.{c,h}

2012-12-21 11:19:49 +00:00

virchrdev.c

conf: Add unix socket support to virChrdevOpen

2013-01-04 18:07:11 -07:00

virchrdev.h

conf: Add unix socket support to virChrdevOpen

2013-01-04 18:07:11 -07:00