linux/lib/audit.c
<<
>>
Prefs
   1// SPDX-License-Identifier: GPL-2.0
   2#include <linux/init.h>
   3#include <linux/types.h>
   4#include <linux/audit.h>
   5#include <asm/unistd.h>
   6
   7static unsigned dir_class[] = {
   8#include <asm-generic/audit_dir_write.h>
   9~0U
  10};
  11
  12static unsigned read_class[] = {
  13#include <asm-generic/audit_read.h>
  14~0U
  15};
  16
  17static unsigned write_class[] = {
  18#include <asm-generic/audit_write.h>
  19~0U
  20};
  21
  22static unsigned chattr_class[] = {
  23#include <asm-generic/audit_change_attr.h>
  24~0U
  25};
  26
  27static unsigned signal_class[] = {
  28#include <asm-generic/audit_signal.h>
  29~0U
  30};
  31
  32int audit_classify_arch(int arch)
  33{
  34        if (audit_is_compat(arch))
  35                return 1;
  36        else
  37                return 0;
  38}
  39
  40int audit_classify_syscall(int abi, unsigned syscall)
  41{
  42        if (audit_is_compat(abi))
  43                return audit_classify_compat_syscall(abi, syscall);
  44
  45        switch(syscall) {
  46#ifdef __NR_open
  47        case __NR_open:
  48                return 2;
  49#endif
  50#ifdef __NR_openat
  51        case __NR_openat:
  52                return 3;
  53#endif
  54#ifdef __NR_socketcall
  55        case __NR_socketcall:
  56                return 4;
  57#endif
  58#ifdef __NR_execveat
  59        case __NR_execveat:
  60#endif
  61        case __NR_execve:
  62                return 5;
  63        default:
  64                return 0;
  65        }
  66}
  67
  68static int __init audit_classes_init(void)
  69{
  70#ifdef CONFIG_AUDIT_COMPAT_GENERIC
  71        audit_register_class(AUDIT_CLASS_WRITE_32, compat_write_class);
  72        audit_register_class(AUDIT_CLASS_READ_32, compat_read_class);
  73        audit_register_class(AUDIT_CLASS_DIR_WRITE_32, compat_dir_class);
  74        audit_register_class(AUDIT_CLASS_CHATTR_32, compat_chattr_class);
  75        audit_register_class(AUDIT_CLASS_SIGNAL_32, compat_signal_class);
  76#endif
  77        audit_register_class(AUDIT_CLASS_WRITE, write_class);
  78        audit_register_class(AUDIT_CLASS_READ, read_class);
  79        audit_register_class(AUDIT_CLASS_DIR_WRITE, dir_class);
  80        audit_register_class(AUDIT_CLASS_CHATTR, chattr_class);
  81        audit_register_class(AUDIT_CLASS_SIGNAL, signal_class);
  82        return 0;
  83}
  84
  85__initcall(audit_classes_init);
  86