~ [ source navigation ] ~ [ diff markup ] ~ [ identifier search ] ~

TOMOYO Linux Cross Reference
Linux/kernel/audit.h

Version: ~ [ linux-6.11-rc3 ] ~ [ linux-6.10.4 ] ~ [ linux-6.9.12 ] ~ [ linux-6.8.12 ] ~ [ linux-6.7.12 ] ~ [ linux-6.6.45 ] ~ [ linux-6.5.13 ] ~ [ linux-6.4.16 ] ~ [ linux-6.3.13 ] ~ [ linux-6.2.16 ] ~ [ linux-6.1.104 ] ~ [ linux-6.0.19 ] ~ [ linux-5.19.17 ] ~ [ linux-5.18.19 ] ~ [ linux-5.17.15 ] ~ [ linux-5.16.20 ] ~ [ linux-5.15.164 ] ~ [ linux-5.14.21 ] ~ [ linux-5.13.19 ] ~ [ linux-5.12.19 ] ~ [ linux-5.11.22 ] ~ [ linux-5.10.223 ] ~ [ linux-5.9.16 ] ~ [ linux-5.8.18 ] ~ [ linux-5.7.19 ] ~ [ linux-5.6.19 ] ~ [ linux-5.5.19 ] ~ [ linux-5.4.281 ] ~ [ linux-5.3.18 ] ~ [ linux-5.2.21 ] ~ [ linux-5.1.21 ] ~ [ linux-5.0.21 ] ~ [ linux-4.20.17 ] ~ [ linux-4.19.319 ] ~ [ linux-4.18.20 ] ~ [ linux-4.17.19 ] ~ [ linux-4.16.18 ] ~ [ linux-4.15.18 ] ~ [ linux-4.14.336 ] ~ [ linux-4.13.16 ] ~ [ linux-4.12.14 ] ~ [ linux-4.11.12 ] ~ [ linux-4.10.17 ] ~ [ linux-4.9.337 ] ~ [ linux-4.4.302 ] ~ [ linux-3.10.108 ] ~ [ linux-2.6.32.71 ] ~ [ linux-2.6.0 ] ~ [ linux-2.4.37.11 ] ~ [ unix-v6-master ] ~ [ ccs-tools-1.8.9 ] ~ [ policy-sample ] ~
Architecture: ~ [ i386 ] ~ [ alpha ] ~ [ m68k ] ~ [ mips ] ~ [ ppc ] ~ [ sparc ] ~ [ sparc64 ] ~

Diff markup

Differences between /kernel/audit.h (Version linux-6.11-rc3) and /kernel/audit.h (Version linux-5.3.18)


  1 /* SPDX-License-Identifier: GPL-2.0-or-later *      1 /* SPDX-License-Identifier: GPL-2.0-or-later */
  2 /* audit -- definition of audit_context struct !!   2 /* audit -- definition of audit_context structure and supporting types 
  3  *                                                  3  *
  4  * Copyright 2003-2004 Red Hat, Inc.                4  * Copyright 2003-2004 Red Hat, Inc.
  5  * Copyright 2005 Hewlett-Packard Development       5  * Copyright 2005 Hewlett-Packard Development Company, L.P.
  6  * Copyright 2005 IBM Corporation                   6  * Copyright 2005 IBM Corporation
  7  */                                                 7  */
  8                                                     8 
  9 #ifndef _KERNEL_AUDIT_H_                       << 
 10 #define _KERNEL_AUDIT_H_                       << 
 11                                                << 
 12 #include <linux/fs.h>                               9 #include <linux/fs.h>
 13 #include <linux/audit.h>                           10 #include <linux/audit.h>
 14 #include <linux/skbuff.h>                          11 #include <linux/skbuff.h>
 15 #include <uapi/linux/mqueue.h>                     12 #include <uapi/linux/mqueue.h>
 16 #include <linux/tty.h>                             13 #include <linux/tty.h>
 17 #include <uapi/linux/openat2.h> // struct open << 
 18                                                    14 
 19 /* AUDIT_NAMES is the number of slots we reser     15 /* AUDIT_NAMES is the number of slots we reserve in the audit_context
 20  * for saving names from getname().  If we get     16  * for saving names from getname().  If we get more names we will allocate
 21  * a name dynamically and also add those to th     17  * a name dynamically and also add those to the list anchored by names_list. */
 22 #define AUDIT_NAMES     5                          18 #define AUDIT_NAMES     5
 23                                                    19 
 24 /* At task start time, the audit_state is set      20 /* At task start time, the audit_state is set in the audit_context using
 25    a per-task filter.  At syscall entry, the a     21    a per-task filter.  At syscall entry, the audit_state is augmented by
 26    the syscall filter. */                          22    the syscall filter. */
 27 enum audit_state {                                 23 enum audit_state {
 28         AUDIT_STATE_DISABLED,   /* Do not crea !!  24         AUDIT_DISABLED,         /* Do not create per-task audit_context.
 29                                  * No syscall-     25                                  * No syscall-specific audit records can
 30                                  * be generate     26                                  * be generated. */
 31         AUDIT_STATE_BUILD,      /* Create the  !!  27         AUDIT_BUILD_CONTEXT,    /* Create the per-task audit_context,
 32                                  * and fill it     28                                  * and fill it in at syscall
 33                                  * entry time.     29                                  * entry time.  This makes a full
 34                                  * syscall rec     30                                  * syscall record available if some
 35                                  * other part      31                                  * other part of the kernel decides it
 36                                  * should be r     32                                  * should be recorded. */
 37         AUDIT_STATE_RECORD      /* Create the  !!  33         AUDIT_RECORD_CONTEXT    /* Create the per-task audit_context,
 38                                  * always fill     34                                  * always fill it in at syscall entry
 39                                  * time, and a     35                                  * time, and always write out the audit
 40                                  * record at s     36                                  * record at syscall exit time.  */
 41 };                                                 37 };
 42                                                    38 
 43 /* Rule lists */                                   39 /* Rule lists */
 44 struct audit_watch;                                40 struct audit_watch;
 45 struct audit_fsnotify_mark;                        41 struct audit_fsnotify_mark;
 46 struct audit_tree;                                 42 struct audit_tree;
 47 struct audit_chunk;                                43 struct audit_chunk;
 48                                                    44 
 49 struct audit_entry {                               45 struct audit_entry {
 50         struct list_head        list;              46         struct list_head        list;
 51         struct rcu_head         rcu;               47         struct rcu_head         rcu;
 52         struct audit_krule      rule;              48         struct audit_krule      rule;
 53 };                                                 49 };
 54                                                    50 
 55 struct audit_cap_data {                            51 struct audit_cap_data {
 56         kernel_cap_t            permitted;         52         kernel_cap_t            permitted;
 57         kernel_cap_t            inheritable;       53         kernel_cap_t            inheritable;
 58         union {                                    54         union {
 59                 unsigned int    fE;                55                 unsigned int    fE;             /* effective bit of file cap */
 60                 kernel_cap_t    effective;         56                 kernel_cap_t    effective;      /* effective set of process */
 61         };                                         57         };
 62         kernel_cap_t            ambient;           58         kernel_cap_t            ambient;
 63         kuid_t                  rootid;            59         kuid_t                  rootid;
 64 };                                                 60 };
 65                                                    61 
 66 /* When fs/namei.c:getname() is called, we sto     62 /* When fs/namei.c:getname() is called, we store the pointer in name and bump
 67  * the refcnt in the associated filename struc     63  * the refcnt in the associated filename struct.
 68  *                                                 64  *
 69  * Further, in fs/namei.c:path_lookup() we sto     65  * Further, in fs/namei.c:path_lookup() we store the inode and device.
 70  */                                                66  */
 71 struct audit_names {                               67 struct audit_names {
 72         struct list_head        list;              68         struct list_head        list;           /* audit_context->names_list */
 73                                                    69 
 74         struct filename         *name;             70         struct filename         *name;
 75         int                     name_len;          71         int                     name_len;       /* number of chars to log */
 76         bool                    hidden;            72         bool                    hidden;         /* don't log this record */
 77                                                    73 
 78         unsigned long           ino;               74         unsigned long           ino;
 79         dev_t                   dev;               75         dev_t                   dev;
 80         umode_t                 mode;              76         umode_t                 mode;
 81         kuid_t                  uid;               77         kuid_t                  uid;
 82         kgid_t                  gid;               78         kgid_t                  gid;
 83         dev_t                   rdev;              79         dev_t                   rdev;
 84         u32                     osid;              80         u32                     osid;
 85         struct audit_cap_data   fcap;              81         struct audit_cap_data   fcap;
 86         unsigned int            fcap_ver;          82         unsigned int            fcap_ver;
 87         unsigned char           type;              83         unsigned char           type;           /* record type */
 88         /*                                         84         /*
 89          * This was an allocated audit_names a     85          * This was an allocated audit_names and not from the array of
 90          * names allocated in the task audit c     86          * names allocated in the task audit context.  Thus this name
 91          * should be freed on syscall exit.        87          * should be freed on syscall exit.
 92          */                                        88          */
 93         bool                    should_free;       89         bool                    should_free;
 94 };                                                 90 };
 95                                                    91 
 96 struct audit_proctitle {                           92 struct audit_proctitle {
 97         int     len;    /* length of the cmdli     93         int     len;    /* length of the cmdline field. */
 98         char    *value; /* the cmdline field *     94         char    *value; /* the cmdline field */
 99 };                                                 95 };
100                                                    96 
101 /* The per-task audit context. */                  97 /* The per-task audit context. */
102 struct audit_context {                             98 struct audit_context {
103         int                 dummy;      /* mus     99         int                 dummy;      /* must be the first element */
104         enum {                                 !! 100         int                 in_syscall; /* 1 if task is in a syscall */
105                 AUDIT_CTX_UNUSED,       /* aud << 
106                 AUDIT_CTX_SYSCALL,      /* in  << 
107                 AUDIT_CTX_URING,        /* in  << 
108         } context;                             << 
109         enum audit_state    state, current_sta    101         enum audit_state    state, current_state;
110         unsigned int        serial;     /* ser    102         unsigned int        serial;     /* serial number for record */
111         int                 major;      /* sys    103         int                 major;      /* syscall number */
112         int                 uring_op;   /* uri << 
113         struct timespec64   ctime;      /* tim    104         struct timespec64   ctime;      /* time of syscall entry */
114         unsigned long       argv[4];    /* sys    105         unsigned long       argv[4];    /* syscall arguments */
115         long                return_code;/* sys    106         long                return_code;/* syscall return code */
116         u64                 prio;                 107         u64                 prio;
117         int                 return_valid; /* r    108         int                 return_valid; /* return code is valid */
118         /*                                        109         /*
119          * The names_list is the list of all a    110          * The names_list is the list of all audit_names collected during this
120          * syscall.  The first AUDIT_NAMES ent    111          * syscall.  The first AUDIT_NAMES entries in the names_list will
121          * actually be from the preallocated_n    112          * actually be from the preallocated_names array for performance
122          * reasons.  Except during allocation     113          * reasons.  Except during allocation they should never be referenced
123          * through the preallocated_names arra    114          * through the preallocated_names array and should only be found/used
124          * by running the names_list.             115          * by running the names_list.
125          */                                       116          */
126         struct audit_names  preallocated_names    117         struct audit_names  preallocated_names[AUDIT_NAMES];
127         int                 name_count; /* tot    118         int                 name_count; /* total records in names_list */
128         struct list_head    names_list; /* str    119         struct list_head    names_list; /* struct audit_names->list anchor */
129         char                *filterkey; /* key    120         char                *filterkey; /* key for rule that triggered record */
130         struct path         pwd;                  121         struct path         pwd;
131         struct audit_aux_data *aux;               122         struct audit_aux_data *aux;
132         struct audit_aux_data *aux_pids;          123         struct audit_aux_data *aux_pids;
133         struct sockaddr_storage *sockaddr;        124         struct sockaddr_storage *sockaddr;
134         size_t sockaddr_len;                      125         size_t sockaddr_len;
135                                 /* Save things    126                                 /* Save things to print about task_struct */
136         pid_t               ppid;              !! 127         pid_t               pid, ppid;
137         kuid_t              uid, euid, suid, f    128         kuid_t              uid, euid, suid, fsuid;
138         kgid_t              gid, egid, sgid, f    129         kgid_t              gid, egid, sgid, fsgid;
139         unsigned long       personality;          130         unsigned long       personality;
140         int                 arch;                 131         int                 arch;
141                                                   132 
142         pid_t               target_pid;           133         pid_t               target_pid;
143         kuid_t              target_auid;          134         kuid_t              target_auid;
144         kuid_t              target_uid;           135         kuid_t              target_uid;
145         unsigned int        target_sessionid;     136         unsigned int        target_sessionid;
146         u32                 target_sid;           137         u32                 target_sid;
147         char                target_comm[TASK_C    138         char                target_comm[TASK_COMM_LEN];
148                                                   139 
149         struct audit_tree_refs *trees, *first_    140         struct audit_tree_refs *trees, *first_trees;
150         struct list_head killed_trees;            141         struct list_head killed_trees;
151         int tree_count;                           142         int tree_count;
152                                                   143 
153         int type;                                 144         int type;
154         union {                                   145         union {
155                 struct {                          146                 struct {
156                         int nargs;                147                         int nargs;
157                         long args[6];             148                         long args[6];
158                 } socketcall;                     149                 } socketcall;
159                 struct {                          150                 struct {
160                         kuid_t                    151                         kuid_t                  uid;
161                         kgid_t                    152                         kgid_t                  gid;
162                         umode_t                   153                         umode_t                 mode;
163                         u32                       154                         u32                     osid;
164                         int                       155                         int                     has_perm;
165                         uid_t                     156                         uid_t                   perm_uid;
166                         gid_t                     157                         gid_t                   perm_gid;
167                         umode_t                   158                         umode_t                 perm_mode;
168                         unsigned long             159                         unsigned long           qbytes;
169                 } ipc;                            160                 } ipc;
170                 struct {                          161                 struct {
171                         mqd_t                     162                         mqd_t                   mqdes;
172                         struct mq_attr            163                         struct mq_attr          mqstat;
173                 } mq_getsetattr;                  164                 } mq_getsetattr;
174                 struct {                          165                 struct {
175                         mqd_t                     166                         mqd_t                   mqdes;
176                         int                       167                         int                     sigev_signo;
177                 } mq_notify;                      168                 } mq_notify;
178                 struct {                          169                 struct {
179                         mqd_t                     170                         mqd_t                   mqdes;
180                         size_t                    171                         size_t                  msg_len;
181                         unsigned int              172                         unsigned int            msg_prio;
182                         struct timespec64         173                         struct timespec64       abs_timeout;
183                 } mq_sendrecv;                    174                 } mq_sendrecv;
184                 struct {                          175                 struct {
185                         int                       176                         int                     oflag;
186                         umode_t                   177                         umode_t                 mode;
187                         struct mq_attr            178                         struct mq_attr          attr;
188                 } mq_open;                        179                 } mq_open;
189                 struct {                          180                 struct {
190                         pid_t                     181                         pid_t                   pid;
191                         struct audit_cap_data     182                         struct audit_cap_data   cap;
192                 } capset;                         183                 } capset;
193                 struct {                          184                 struct {
194                         int                       185                         int                     fd;
195                         int                       186                         int                     flags;
196                 } mmap;                           187                 } mmap;
197                 struct open_how openat2;       << 
198                 struct {                          188                 struct {
199                         int                       189                         int                     argc;
200                 } execve;                         190                 } execve;
201                 struct {                          191                 struct {
202                         char                      192                         char                    *name;
203                 } module;                         193                 } module;
204                 struct {                       << 
205                         struct audit_ntp_data  << 
206                         struct timespec64      << 
207                 } time;                        << 
208         };                                        194         };
209         int fds[2];                               195         int fds[2];
210         struct audit_proctitle proctitle;         196         struct audit_proctitle proctitle;
211 };                                                197 };
212                                                   198 
213 extern bool audit_ever_enabled;                   199 extern bool audit_ever_enabled;
214                                                   200 
215 extern void audit_log_session_info(struct audi    201 extern void audit_log_session_info(struct audit_buffer *ab);
216                                                   202 
217 extern int auditd_test_task(struct task_struct    203 extern int auditd_test_task(struct task_struct *task);
218                                                   204 
219 #define AUDIT_INODE_BUCKETS     32                205 #define AUDIT_INODE_BUCKETS     32
220 extern struct list_head audit_inode_hash[AUDIT    206 extern struct list_head audit_inode_hash[AUDIT_INODE_BUCKETS];
221                                                   207 
222 static inline int audit_hash_ino(u32 ino)         208 static inline int audit_hash_ino(u32 ino)
223 {                                                 209 {
224         return (ino & (AUDIT_INODE_BUCKETS-1))    210         return (ino & (AUDIT_INODE_BUCKETS-1));
225 }                                                 211 }
226                                                   212 
227 /* Indicates that audit should log the full pa    213 /* Indicates that audit should log the full pathname. */
228 #define AUDIT_NAME_FULL -1                        214 #define AUDIT_NAME_FULL -1
229                                                   215 
230 extern int audit_match_class(int class, unsign    216 extern int audit_match_class(int class, unsigned syscall);
231 extern int audit_comparator(const u32 left, co    217 extern int audit_comparator(const u32 left, const u32 op, const u32 right);
232 extern int audit_uid_comparator(kuid_t left, u    218 extern int audit_uid_comparator(kuid_t left, u32 op, kuid_t right);
233 extern int audit_gid_comparator(kgid_t left, u    219 extern int audit_gid_comparator(kgid_t left, u32 op, kgid_t right);
234 extern int parent_len(const char *path);          220 extern int parent_len(const char *path);
235 extern int audit_compare_dname_path(const stru    221 extern int audit_compare_dname_path(const struct qstr *dname, const char *path, int plen);
236 extern struct sk_buff *audit_make_reply(int se    222 extern struct sk_buff *audit_make_reply(int seq, int type, int done, int multi,
237                                         const     223                                         const void *payload, int size);
238 extern void                 audit_panic(const     224 extern void                 audit_panic(const char *message);
239                                                   225 
240 struct audit_netlink_list {                       226 struct audit_netlink_list {
241         __u32 portid;                             227         __u32 portid;
242         struct net *net;                          228         struct net *net;
243         struct sk_buff_head q;                    229         struct sk_buff_head q;
244 };                                                230 };
245                                                   231 
246 int audit_send_list_thread(void *_dest);       !! 232 int audit_send_list(void *_dest);
                                                   >> 233 
                                                   >> 234 extern int selinux_audit_rule_update(void);
247                                                   235 
248 extern struct mutex audit_filter_mutex;           236 extern struct mutex audit_filter_mutex;
249 extern int audit_del_rule(struct audit_entry *    237 extern int audit_del_rule(struct audit_entry *entry);
250 extern void audit_free_rule_rcu(struct rcu_hea    238 extern void audit_free_rule_rcu(struct rcu_head *head);
251 extern struct list_head audit_filter_list[];      239 extern struct list_head audit_filter_list[];
252                                                   240 
253 extern struct audit_entry *audit_dupe_rule(str    241 extern struct audit_entry *audit_dupe_rule(struct audit_krule *old);
254                                                   242 
255 extern void audit_log_d_path_exe(struct audit_    243 extern void audit_log_d_path_exe(struct audit_buffer *ab,
256                                  struct mm_str    244                                  struct mm_struct *mm);
257                                                   245 
258 extern struct tty_struct *audit_get_tty(void);    246 extern struct tty_struct *audit_get_tty(void);
259 extern void audit_put_tty(struct tty_struct *t    247 extern void audit_put_tty(struct tty_struct *tty);
260                                                   248 
261 /* audit watch/mark/tree functions */             249 /* audit watch/mark/tree functions */
262 extern unsigned int audit_serial(void);        << 
263 #ifdef CONFIG_AUDITSYSCALL                        250 #ifdef CONFIG_AUDITSYSCALL
                                                   >> 251 extern unsigned int audit_serial(void);
264 extern int auditsc_get_stamp(struct audit_cont    252 extern int auditsc_get_stamp(struct audit_context *ctx,
265                               struct timespec6    253                               struct timespec64 *t, unsigned int *serial);
266                                                   254 
267 extern void audit_put_watch(struct audit_watch    255 extern void audit_put_watch(struct audit_watch *watch);
268 extern void audit_get_watch(struct audit_watch    256 extern void audit_get_watch(struct audit_watch *watch);
269 extern int audit_to_watch(struct audit_krule *    257 extern int audit_to_watch(struct audit_krule *krule, char *path, int len,
270                           u32 op);                258                           u32 op);
271 extern int audit_add_watch(struct audit_krule     259 extern int audit_add_watch(struct audit_krule *krule, struct list_head **list);
272 extern void audit_remove_watch_rule(struct aud    260 extern void audit_remove_watch_rule(struct audit_krule *krule);
273 extern char *audit_watch_path(struct audit_wat    261 extern char *audit_watch_path(struct audit_watch *watch);
274 extern int audit_watch_compare(struct audit_wa    262 extern int audit_watch_compare(struct audit_watch *watch, unsigned long ino,
275                                dev_t dev);        263                                dev_t dev);
276                                                   264 
277 extern struct audit_fsnotify_mark *audit_alloc    265 extern struct audit_fsnotify_mark *audit_alloc_mark(struct audit_krule *krule,
278                                                   266                                                     char *pathname, int len);
279 extern char *audit_mark_path(struct audit_fsno    267 extern char *audit_mark_path(struct audit_fsnotify_mark *mark);
280 extern void audit_remove_mark(struct audit_fsn    268 extern void audit_remove_mark(struct audit_fsnotify_mark *audit_mark);
281 extern void audit_remove_mark_rule(struct audi    269 extern void audit_remove_mark_rule(struct audit_krule *krule);
282 extern int audit_mark_compare(struct audit_fsn    270 extern int audit_mark_compare(struct audit_fsnotify_mark *mark,
283                               unsigned long in    271                               unsigned long ino, dev_t dev);
284 extern int audit_dupe_exe(struct audit_krule *    272 extern int audit_dupe_exe(struct audit_krule *new, struct audit_krule *old);
285 extern int audit_exe_compare(struct task_struc    273 extern int audit_exe_compare(struct task_struct *tsk,
286                              struct audit_fsno    274                              struct audit_fsnotify_mark *mark);
287                                                   275 
288 extern struct audit_chunk *audit_tree_lookup(c    276 extern struct audit_chunk *audit_tree_lookup(const struct inode *inode);
289 extern void audit_put_chunk(struct audit_chunk    277 extern void audit_put_chunk(struct audit_chunk *chunk);
290 extern bool audit_tree_match(struct audit_chun    278 extern bool audit_tree_match(struct audit_chunk *chunk,
291                              struct audit_tree    279                              struct audit_tree *tree);
292 extern int audit_make_tree(struct audit_krule     280 extern int audit_make_tree(struct audit_krule *rule, char *pathname, u32 op);
293 extern int audit_add_tree_rule(struct audit_kr    281 extern int audit_add_tree_rule(struct audit_krule *rule);
294 extern int audit_remove_tree_rule(struct audit    282 extern int audit_remove_tree_rule(struct audit_krule *rule);
295 extern void audit_trim_trees(void);               283 extern void audit_trim_trees(void);
296 extern int audit_tag_tree(char *old, char *new    284 extern int audit_tag_tree(char *old, char *new);
297 extern const char *audit_tree_path(struct audi    285 extern const char *audit_tree_path(struct audit_tree *tree);
298 extern void audit_put_tree(struct audit_tree *    286 extern void audit_put_tree(struct audit_tree *tree);
299 extern void audit_kill_trees(struct audit_cont    287 extern void audit_kill_trees(struct audit_context *context);
300                                                   288 
301 extern int audit_signal_info_syscall(struct ta    289 extern int audit_signal_info_syscall(struct task_struct *t);
302 extern void audit_filter_inodes(struct task_st    290 extern void audit_filter_inodes(struct task_struct *tsk,
303                                 struct audit_c    291                                 struct audit_context *ctx);
304 extern struct list_head *audit_killed_trees(vo    292 extern struct list_head *audit_killed_trees(void);
305 #else /* CONFIG_AUDITSYSCALL */                   293 #else /* CONFIG_AUDITSYSCALL */
306 #define auditsc_get_stamp(c, t, s) 0              294 #define auditsc_get_stamp(c, t, s) 0
307 #define audit_put_watch(w) do { } while (0)    !! 295 #define audit_put_watch(w) {}
308 #define audit_get_watch(w) do { } while (0)    !! 296 #define audit_get_watch(w) {}
309 #define audit_to_watch(k, p, l, o) (-EINVAL)      297 #define audit_to_watch(k, p, l, o) (-EINVAL)
310 #define audit_add_watch(k, l) (-EINVAL)           298 #define audit_add_watch(k, l) (-EINVAL)
311 #define audit_remove_watch_rule(k) BUG()          299 #define audit_remove_watch_rule(k) BUG()
312 #define audit_watch_path(w) ""                    300 #define audit_watch_path(w) ""
313 #define audit_watch_compare(w, i, d) 0            301 #define audit_watch_compare(w, i, d) 0
314                                                   302 
315 #define audit_alloc_mark(k, p, l) (ERR_PTR(-EI    303 #define audit_alloc_mark(k, p, l) (ERR_PTR(-EINVAL))
316 #define audit_mark_path(m) ""                     304 #define audit_mark_path(m) ""
317 #define audit_remove_mark(m) do { } while (0)  !! 305 #define audit_remove_mark(m)
318 #define audit_remove_mark_rule(k) do { } while !! 306 #define audit_remove_mark_rule(k)
319 #define audit_mark_compare(m, i, d) 0             307 #define audit_mark_compare(m, i, d) 0
320 #define audit_exe_compare(t, m) (-EINVAL)         308 #define audit_exe_compare(t, m) (-EINVAL)
321 #define audit_dupe_exe(n, o) (-EINVAL)            309 #define audit_dupe_exe(n, o) (-EINVAL)
322                                                   310 
323 #define audit_remove_tree_rule(rule) BUG()        311 #define audit_remove_tree_rule(rule) BUG()
324 #define audit_add_tree_rule(rule) -EINVAL         312 #define audit_add_tree_rule(rule) -EINVAL
325 #define audit_make_tree(rule, str, op) -EINVAL    313 #define audit_make_tree(rule, str, op) -EINVAL
326 #define audit_trim_trees() do { } while (0)    !! 314 #define audit_trim_trees() (void)0
327 #define audit_put_tree(tree) do { } while (0)  !! 315 #define audit_put_tree(tree) (void)0
328 #define audit_tag_tree(old, new) -EINVAL          316 #define audit_tag_tree(old, new) -EINVAL
329 #define audit_tree_path(rule) ""        /* nev    317 #define audit_tree_path(rule) ""        /* never called */
330 #define audit_kill_trees(context) BUG()           318 #define audit_kill_trees(context) BUG()
331                                                   319 
332 static inline int audit_signal_info_syscall(st    320 static inline int audit_signal_info_syscall(struct task_struct *t)
333 {                                                 321 {
334         return 0;                                 322         return 0;
335 }                                                 323 }
336                                                   324 
337 #define audit_filter_inodes(t, c) do { } while !! 325 #define audit_filter_inodes(t, c) AUDIT_DISABLED
338 #endif /* CONFIG_AUDITSYSCALL */                  326 #endif /* CONFIG_AUDITSYSCALL */
339                                                   327 
340 extern char *audit_unpack_string(void **bufp,     328 extern char *audit_unpack_string(void **bufp, size_t *remain, size_t len);
341                                                   329 
                                                   >> 330 extern pid_t audit_sig_pid;
                                                   >> 331 extern kuid_t audit_sig_uid;
                                                   >> 332 extern u32 audit_sig_sid;
                                                   >> 333 
342 extern int audit_filter(int msgtype, unsigned     334 extern int audit_filter(int msgtype, unsigned int listtype);
343                                                   335 
344 extern void audit_ctl_lock(void);                 336 extern void audit_ctl_lock(void);
345 extern void audit_ctl_unlock(void);               337 extern void audit_ctl_unlock(void);
346                                                << 
347 #endif                                         << 
348                                                   338 

~ [ source navigation ] ~ [ diff markup ] ~ [ identifier search ] ~

kernel.org | git.kernel.org | LWN.net | Project Home | SVN repository | Mail admin

Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.

sflogo.php