From: Linus Torvalds Date: Wed, 28 May 2025 15:34:19 +0000 (-0700) Subject: Merge tag 'audit-pr-20250527' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoor... X-Git-Url: http://git.monstr.eu/?a=commitdiff_plain;h=3d413f0cfd7ef0fe478e98fafcc084209520abd0;p=linux-2.6-microblaze.git Merge tag 'audit-pr-20250527' of git://git./linux/kernel/git/pcmoore/audit Pull audit updates from Paul Moore: - Always record AUDIT_ANOM events when auditing is enabled. Prior to this patch we only recorded AUDIT_ANOM events if auditing was enabled and the admin/distro had explicitly configured audit beyond the defaults. Considering that AUDIT_ANOM events are anomolous events considered to be "security relevant", it seems wise to record these events as long as auditing is enabled, even if the system is running with a default audit configuration. - Mark the audit_log_vformat() function with the __printf() attribute to quiet GCC. * tag 'audit-pr-20250527' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit: audit: record AUDIT_ANOM_* events regardless of presence of rules audit: mark audit_log_vformat() with __printf() attribute --- 3d413f0cfd7ef0fe478e98fafcc084209520abd0