ROX-30258: Track file ownership changes #156
Draft
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
ovalenti
force-pushed
the
ovalenti/ROX-30258-ownership-tracking
branch
from
e94e169 to
f0c48bd
Compare
Molter73
reviewed
Nov 18, 2025
ovalenti
force-pushed
the
ovalenti/ROX-30258-ownership-tracking
branch
2 times, most recently
from
39cf241 to
f15de82
Compare
ovalenti
changed the base branch from
main
to
mauro/ROX-30257/track-mode-change
Molter73
force-pushed
the
mauro/ROX-30257/track-mode-change
branch
from
f1e642b to
aa0399a
Compare
ovalenti
force-pushed
the
ovalenti/ROX-30258-ownership-tracking
branch
2 times, most recently
from
003e113 to
bbabdca
Compare
Molter73
force-pushed
the
mauro/ROX-30257/track-mode-change
branch
3 times, most recently
from
3a8ef28 to
b948cef
Compare
6 tasks
Molter73
force-pushed
the
mauro/ROX-30257/track-mode-change
branch
from
b948cef to
e07d856
Compare
Part of ROX-32059. The local implementation of d_path now uses bpf_loop, which enables it to iterate further than the previously implemented loop that did at most 16 levels of path.
Molter73
force-pushed
the
mauro/ROX-30257/track-mode-change
branch
from
e07d856 to
b96120b
Compare
This is done via the path_chmod LSM hook. WIP: the old mode is not quite working yet.
This allows us to exercise the trace_path_chmod bpf program on unit tests.
Molter73
force-pushed
the
mauro/ROX-30257/track-mode-change
branch
from
b96120b to
1746a5f
Compare
missing user/group mapping to string representation
ovalenti
force-pushed
the
ovalenti/ROX-30258-ownership-tracking
branch
from
223faed to
9af8d73
Compare
Molter73
force-pushed
the
mauro/ROX-30257/track-mode-change
branch
2 times, most recently
from
ee54d95 to
aeee08e
Compare
Molter73
force-pushed
the
mauro/ROX-30257/track-mode-change
branch
from
aeee08e to
ff2f6db
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
Ownership changes are the first kind of event that has some specific attributes. This PR proposes to add a type-specific field to the event structure in the form of a union :
Checklist
Automated testing
If any of these don't apply, please comment below.
Testing Performed