Subject audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs
Author fred@cloudflare.com
Date 2026-03-11 21:31:17 +0000 UTC
Version
Cc andrii@kernel.org ast@kernel.org audit@vger.kernel.org bpf@vger.kernel.org daniel@iogearbox.net eddyz87@gmail.com eparis@redhat.com fred@cloudflare.com gnoack@google.com haoluo@google.com jmorris@namei.org john.fastabend@gmail.com jolsa@kernel.org kernel-team@cloudflare.com kpsingh@kernel.org linux-kernel@vger.kernel.org linux-kselftest@vger.kernel.org linux-security-module@vger.kernel.org martin.lau@linux.dev mic@digikod.net paul@paul-moore.com sdf@fomichev.me serge@hallyn.com shuah@kernel.org song@kernel.org yonghong.song@linux.dev
Patches (4)
Name Content [All]
[PATCH RFC bpf-next 1/4] audit: Implement bpf_audit_log_*() wrappers [Body]
[PATCH RFC bpf-next 2/4] audit/security: Enable audit BPF kfuncs [Body]
[PATCH RFC bpf-next 3/4] selftests/bpf: Add audit helpers for BPF tests [Body]
[PATCH RFC bpf-next 4/4] selftests/bpf: Add lsm_audit_kfuncs tests [Body]
Series Summary
Passed
✓ All tests passed. No findings.
Sessions
Session 2026-03-11
Passed
ID (for dev) 412c5aac-4e7e-45ec-9c70-609cdb0e8780
Status finished
Triaged OK [Log]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base ca0f39a369c5f927c3d004e63a5a778b08a9df94 [Config] passed [Log]
[KASAN] Boot test: Base ca0f39a369c5f927c3d004e63a5a778b08a9df94 [Config] passed [Log]
[KASAN] Build Patched ca0f39a369c5f927c3d004e63a5a778b08a9df94 [Config] [patched] passed [Log]
[KASAN] Boot test: Patched ca0f39a369c5f927c3d004e63a5a778b08a9df94 [Config] [patched] passed [Log]
[KASAN] Fuzz ca0f39a369c5f927c3d004e63a5a778b08a9df94 [Config] ca0f39a369c5f927c3d004e63a5a778b08a9df94 [Config] [patched] passed [Log] [Artifacts]