Commit | Line | Data |
---|---|---|
85c8721f | 1 | /* audit.h -- Auditing support |
1da177e4 LT |
2 | * |
3 | * Copyright 2003-2004 Red Hat Inc., Durham, North Carolina. | |
4 | * All Rights Reserved. | |
5 | * | |
6 | * This program is free software; you can redistribute it and/or modify | |
7 | * it under the terms of the GNU General Public License as published by | |
8 | * the Free Software Foundation; either version 2 of the License, or | |
9 | * (at your option) any later version. | |
10 | * | |
11 | * This program is distributed in the hope that it will be useful, | |
12 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
13 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
14 | * GNU General Public License for more details. | |
15 | * | |
16 | * You should have received a copy of the GNU General Public License | |
17 | * along with this program; if not, write to the Free Software | |
18 | * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA | |
19 | * | |
20 | * Written by Rickard E. (Rik) Faith <faith@redhat.com> | |
21 | * | |
22 | */ | |
1da177e4 LT |
23 | #ifndef _LINUX_AUDIT_H_ |
24 | #define _LINUX_AUDIT_H_ | |
25 | ||
f001e47f | 26 | #include <linux/sched.h> |
c0a3a20b | 27 | #include <linux/ptrace.h> |
607ca46e | 28 | #include <uapi/linux/audit.h> |
1da177e4 | 29 | |
84cb777e RGB |
30 | #define AUDIT_INO_UNSET ((unsigned long)-1) |
31 | #define AUDIT_DEV_UNSET ((dev_t)-1) | |
32 | ||
c2f0c7c3 SG |
33 | struct audit_sig_info { |
34 | uid_t uid; | |
35 | pid_t pid; | |
e1396065 | 36 | char ctx[0]; |
c2f0c7c3 SG |
37 | }; |
38 | ||
1da177e4 LT |
39 | struct audit_buffer; |
40 | struct audit_context; | |
41 | struct inode; | |
5bb289b5 | 42 | struct netlink_skb_parms; |
37721e1b | 43 | struct path; |
473ae30b | 44 | struct linux_binprm; |
20ca73bc GW |
45 | struct mq_attr; |
46 | struct mqstat; | |
9d57a7f9 AD |
47 | struct audit_watch; |
48 | struct audit_tree; | |
099dd235 | 49 | struct sk_buff; |
9d57a7f9 AD |
50 | |
51 | struct audit_krule { | |
041d7b98 | 52 | u32 pflags; |
9d57a7f9 AD |
53 | u32 flags; |
54 | u32 listnr; | |
55 | u32 action; | |
56 | u32 mask[AUDIT_BITMASK_SIZE]; | |
57 | u32 buflen; /* for data alloc on list rules */ | |
58 | u32 field_count; | |
59 | char *filterkey; /* ties events to rules */ | |
60 | struct audit_field *fields; | |
61 | struct audit_field *arch_f; /* quick access to arch field */ | |
62 | struct audit_field *inode_f; /* quick access to an inode field */ | |
63 | struct audit_watch *watch; /* associated watch */ | |
64 | struct audit_tree *tree; /* associated watched tree */ | |
34d99af5 | 65 | struct audit_fsnotify_mark *exe; |
9d57a7f9 | 66 | struct list_head rlist; /* entry in audit_{watch,tree}.rules list */ |
e45aa212 | 67 | struct list_head list; /* for AUDIT_LIST* purposes only */ |
0590b933 | 68 | u64 prio; |
9d57a7f9 AD |
69 | }; |
70 | ||
041d7b98 RGB |
71 | /* Flag to indicate legacy AUDIT_LOGINUID unset usage */ |
72 | #define AUDIT_LOGINUID_LEGACY 0x1 | |
73 | ||
9d57a7f9 AD |
74 | struct audit_field { |
75 | u32 type; | |
219ca394 RGB |
76 | union { |
77 | u32 val; | |
78 | kuid_t uid; | |
79 | kgid_t gid; | |
80 | struct { | |
81 | char *lsm_str; | |
82 | void *lsm_rule; | |
83 | }; | |
84 | }; | |
9d57a7f9 | 85 | u32 op; |
9d57a7f9 | 86 | }; |
1da177e4 | 87 | |
b0fed402 EP |
88 | extern int is_audit_feature_set(int which); |
89 | ||
b915543b | 90 | extern int __init audit_register_class(int class, unsigned *list); |
55669bfa | 91 | extern int audit_classify_syscall(int abi, unsigned syscall); |
e54dc243 | 92 | extern int audit_classify_arch(int arch); |
4b588411 AT |
93 | /* only for compat system calls */ |
94 | extern unsigned compat_write_class[]; | |
95 | extern unsigned compat_read_class[]; | |
96 | extern unsigned compat_dir_class[]; | |
97 | extern unsigned compat_chattr_class[]; | |
98 | extern unsigned compat_signal_class[]; | |
99 | ||
9e8beeb7 | 100 | extern int audit_classify_compat_syscall(int abi, unsigned syscall); |
78e2e802 JL |
101 | |
102 | /* audit_names->type values */ | |
103 | #define AUDIT_TYPE_UNKNOWN 0 /* we don't know yet */ | |
104 | #define AUDIT_TYPE_NORMAL 1 /* a "normal" audit record */ | |
bfcec708 | 105 | #define AUDIT_TYPE_PARENT 2 /* a parent audit record */ |
4fa6b5ec JL |
106 | #define AUDIT_TYPE_CHILD_DELETE 3 /* a child being deleted */ |
107 | #define AUDIT_TYPE_CHILD_CREATE 4 /* a child being created */ | |
78e2e802 | 108 | |
2950fa9d CG |
109 | /* maximized args number that audit_socketcall can process */ |
110 | #define AUDITSC_ARGS 6 | |
111 | ||
91a27b2a JL |
112 | struct filename; |
113 | ||
4d3fb709 EP |
114 | extern void audit_log_session_info(struct audit_buffer *ab); |
115 | ||
312103d6 | 116 | #ifdef CONFIG_AUDIT_COMPAT_GENERIC |
356750e3 EP |
117 | #define audit_is_compat(arch) (!((arch) & __AUDIT_ARCH_64BIT)) |
118 | #else | |
119 | #define audit_is_compat(arch) false | |
120 | #endif | |
121 | ||
1da177e4 | 122 | #ifdef CONFIG_AUDITSYSCALL |
a9ebe0b9 EP |
123 | #include <asm/syscall.h> /* for syscall_get_arch() */ |
124 | ||
1da177e4 LT |
125 | /* These are defined in auditsc.c */ |
126 | /* Public API */ | |
127 | extern int audit_alloc(struct task_struct *task); | |
a4ff8dba | 128 | extern void __audit_free(struct task_struct *task); |
b4f0d375 | 129 | extern void __audit_syscall_entry(int major, unsigned long a0, unsigned long a1, |
b05d8447 | 130 | unsigned long a2, unsigned long a3); |
d7e7528b | 131 | extern void __audit_syscall_exit(int ret_success, long ret_value); |
7ac86265 | 132 | extern struct filename *__audit_reusename(const __user char *uptr); |
91a27b2a | 133 | extern void __audit_getname(struct filename *name); |
79f6530c JL |
134 | |
135 | #define AUDIT_INODE_PARENT 1 /* dentry represents the parent */ | |
136 | #define AUDIT_INODE_HIDDEN 2 /* audit record should be hidden */ | |
adb5c247 | 137 | extern void __audit_inode(struct filename *name, const struct dentry *dentry, |
79f6530c | 138 | unsigned int flags); |
9f45f5bf | 139 | extern void __audit_file(const struct file *); |
c43a25ab | 140 | extern void __audit_inode_child(const struct inode *parent, |
4fa6b5ec JL |
141 | const struct dentry *dentry, |
142 | const unsigned char type); | |
3dc1c1b2 | 143 | extern void __audit_seccomp(unsigned long syscall, long signr, int code); |
a5cb013d AV |
144 | extern void __audit_ptrace(struct task_struct *t); |
145 | ||
d51374ad AV |
146 | static inline int audit_dummy_context(void) |
147 | { | |
148 | void *p = current->audit_context; | |
149 | return !p || *(int *)p; | |
150 | } | |
a4ff8dba EP |
151 | static inline void audit_free(struct task_struct *task) |
152 | { | |
153 | if (unlikely(task->audit_context)) | |
154 | __audit_free(task); | |
155 | } | |
91397401 | 156 | static inline void audit_syscall_entry(int major, unsigned long a0, |
b05d8447 EP |
157 | unsigned long a1, unsigned long a2, |
158 | unsigned long a3) | |
159 | { | |
cdee3904 | 160 | if (unlikely(current->audit_context)) |
b4f0d375 | 161 | __audit_syscall_entry(major, a0, a1, a2, a3); |
b05d8447 | 162 | } |
d7e7528b EP |
163 | static inline void audit_syscall_exit(void *pt_regs) |
164 | { | |
165 | if (unlikely(current->audit_context)) { | |
166 | int success = is_syscall_success(pt_regs); | |
06bdadd7 | 167 | long return_code = regs_return_value(pt_regs); |
d7e7528b EP |
168 | |
169 | __audit_syscall_exit(success, return_code); | |
170 | } | |
171 | } | |
7ac86265 JL |
172 | static inline struct filename *audit_reusename(const __user char *name) |
173 | { | |
174 | if (unlikely(!audit_dummy_context())) | |
175 | return __audit_reusename(name); | |
176 | return NULL; | |
177 | } | |
91a27b2a | 178 | static inline void audit_getname(struct filename *name) |
d8945bb5 | 179 | { |
5ac3a9c2 | 180 | if (unlikely(!audit_dummy_context())) |
d8945bb5 AV |
181 | __audit_getname(name); |
182 | } | |
79f6530c JL |
183 | static inline void audit_inode(struct filename *name, |
184 | const struct dentry *dentry, | |
bfcec708 | 185 | unsigned int parent) { |
79f6530c JL |
186 | if (unlikely(!audit_dummy_context())) { |
187 | unsigned int flags = 0; | |
188 | if (parent) | |
189 | flags |= AUDIT_INODE_PARENT; | |
190 | __audit_inode(name, dentry, flags); | |
191 | } | |
192 | } | |
9f45f5bf AV |
193 | static inline void audit_file(struct file *file) |
194 | { | |
195 | if (unlikely(!audit_dummy_context())) | |
196 | __audit_file(file); | |
197 | } | |
79f6530c JL |
198 | static inline void audit_inode_parent_hidden(struct filename *name, |
199 | const struct dentry *dentry) | |
200 | { | |
5ac3a9c2 | 201 | if (unlikely(!audit_dummy_context())) |
79f6530c JL |
202 | __audit_inode(name, dentry, |
203 | AUDIT_INODE_PARENT | AUDIT_INODE_HIDDEN); | |
73241ccc | 204 | } |
c43a25ab | 205 | static inline void audit_inode_child(const struct inode *parent, |
4fa6b5ec JL |
206 | const struct dentry *dentry, |
207 | const unsigned char type) { | |
5ac3a9c2 | 208 | if (unlikely(!audit_dummy_context())) |
4fa6b5ec | 209 | __audit_inode_child(parent, dentry, type); |
73241ccc | 210 | } |
0a4ff8c2 | 211 | void audit_core_dumps(long signr); |
1da177e4 | 212 | |
3dc1c1b2 | 213 | static inline void audit_seccomp(unsigned long syscall, long signr, int code) |
85e7bac3 | 214 | { |
7b9205bd KC |
215 | /* Force a record to be reported if a signal was delivered. */ |
216 | if (signr || unlikely(!audit_dummy_context())) | |
3dc1c1b2 | 217 | __audit_seccomp(syscall, signr, code); |
85e7bac3 EP |
218 | } |
219 | ||
a5cb013d AV |
220 | static inline void audit_ptrace(struct task_struct *t) |
221 | { | |
222 | if (unlikely(!audit_dummy_context())) | |
223 | __audit_ptrace(t); | |
224 | } | |
225 | ||
1da177e4 | 226 | /* Private API (for audit.c only) */ |
bfb4496e | 227 | extern unsigned int audit_serial(void); |
48887e63 | 228 | extern int auditsc_get_stamp(struct audit_context *ctx, |
bfb4496e | 229 | struct timespec *t, unsigned int *serial); |
9321d526 KC |
230 | extern int audit_set_loginuid(kuid_t loginuid); |
231 | ||
232 | static inline kuid_t audit_get_loginuid(struct task_struct *tsk) | |
233 | { | |
234 | return tsk->loginuid; | |
235 | } | |
236 | ||
b6cfee4c | 237 | static inline unsigned int audit_get_sessionid(struct task_struct *tsk) |
9321d526 KC |
238 | { |
239 | return tsk->sessionid; | |
240 | } | |
241 | ||
a33e6751 | 242 | extern void __audit_ipc_obj(struct kern_ipc_perm *ipcp); |
2570ebbd | 243 | extern void __audit_ipc_set_perm(unsigned long qbytes, uid_t uid, gid_t gid, umode_t mode); |
d9cfea91 | 244 | extern void __audit_bprm(struct linux_binprm *bprm); |
2950fa9d | 245 | extern int __audit_socketcall(int nargs, unsigned long *args); |
07c49417 | 246 | extern int __audit_sockaddr(int len, void *addr); |
157cf649 | 247 | extern void __audit_fd_pair(int fd1, int fd2); |
df0a4283 | 248 | extern void __audit_mq_open(int oflag, umode_t mode, struct mq_attr *attr); |
c32c8af4 | 249 | extern void __audit_mq_sendrecv(mqd_t mqdes, size_t msg_len, unsigned int msg_prio, const struct timespec *abs_timeout); |
20114f71 | 250 | extern void __audit_mq_notify(mqd_t mqdes, const struct sigevent *notification); |
7392906e | 251 | extern void __audit_mq_getsetattr(mqd_t mqdes, struct mq_attr *mqstat); |
d84f4f99 DH |
252 | extern int __audit_log_bprm_fcaps(struct linux_binprm *bprm, |
253 | const struct cred *new, | |
254 | const struct cred *old); | |
ca24a23e | 255 | extern void __audit_log_capset(const struct cred *new, const struct cred *old); |
120a795d | 256 | extern void __audit_mmap_fd(int fd, int flags); |
d8945bb5 | 257 | |
a33e6751 | 258 | static inline void audit_ipc_obj(struct kern_ipc_perm *ipcp) |
d8945bb5 | 259 | { |
5ac3a9c2 | 260 | if (unlikely(!audit_dummy_context())) |
a33e6751 | 261 | __audit_ipc_obj(ipcp); |
db349509 | 262 | } |
157cf649 | 263 | static inline void audit_fd_pair(int fd1, int fd2) |
d8945bb5 | 264 | { |
5ac3a9c2 | 265 | if (unlikely(!audit_dummy_context())) |
157cf649 | 266 | __audit_fd_pair(fd1, fd2); |
d8945bb5 | 267 | } |
2570ebbd | 268 | static inline void audit_ipc_set_perm(unsigned long qbytes, uid_t uid, gid_t gid, umode_t mode) |
20ca73bc | 269 | { |
5ac3a9c2 | 270 | if (unlikely(!audit_dummy_context())) |
e816f370 | 271 | __audit_ipc_set_perm(qbytes, uid, gid, mode); |
20ca73bc | 272 | } |
9410d228 | 273 | static inline void audit_bprm(struct linux_binprm *bprm) |
07c49417 EP |
274 | { |
275 | if (unlikely(!audit_dummy_context())) | |
d9cfea91 | 276 | __audit_bprm(bprm); |
07c49417 | 277 | } |
2950fa9d | 278 | static inline int audit_socketcall(int nargs, unsigned long *args) |
07c49417 EP |
279 | { |
280 | if (unlikely(!audit_dummy_context())) | |
2950fa9d CG |
281 | return __audit_socketcall(nargs, args); |
282 | return 0; | |
07c49417 EP |
283 | } |
284 | static inline int audit_sockaddr(int len, void *addr) | |
285 | { | |
286 | if (unlikely(!audit_dummy_context())) | |
287 | return __audit_sockaddr(len, addr); | |
288 | return 0; | |
289 | } | |
df0a4283 | 290 | static inline void audit_mq_open(int oflag, umode_t mode, struct mq_attr *attr) |
20ca73bc | 291 | { |
5ac3a9c2 | 292 | if (unlikely(!audit_dummy_context())) |
564f6993 | 293 | __audit_mq_open(oflag, mode, attr); |
20ca73bc | 294 | } |
c32c8af4 | 295 | static inline void audit_mq_sendrecv(mqd_t mqdes, size_t msg_len, unsigned int msg_prio, const struct timespec *abs_timeout) |
20ca73bc | 296 | { |
5ac3a9c2 | 297 | if (unlikely(!audit_dummy_context())) |
c32c8af4 | 298 | __audit_mq_sendrecv(mqdes, msg_len, msg_prio, abs_timeout); |
20ca73bc | 299 | } |
20114f71 | 300 | static inline void audit_mq_notify(mqd_t mqdes, const struct sigevent *notification) |
20ca73bc | 301 | { |
5ac3a9c2 | 302 | if (unlikely(!audit_dummy_context())) |
20114f71 | 303 | __audit_mq_notify(mqdes, notification); |
20ca73bc | 304 | } |
7392906e | 305 | static inline void audit_mq_getsetattr(mqd_t mqdes, struct mq_attr *mqstat) |
20ca73bc | 306 | { |
5ac3a9c2 | 307 | if (unlikely(!audit_dummy_context())) |
7392906e | 308 | __audit_mq_getsetattr(mqdes, mqstat); |
20ca73bc | 309 | } |
3fc689e9 | 310 | |
d84f4f99 DH |
311 | static inline int audit_log_bprm_fcaps(struct linux_binprm *bprm, |
312 | const struct cred *new, | |
313 | const struct cred *old) | |
3fc689e9 EP |
314 | { |
315 | if (unlikely(!audit_dummy_context())) | |
d84f4f99 DH |
316 | return __audit_log_bprm_fcaps(bprm, new, old); |
317 | return 0; | |
3fc689e9 EP |
318 | } |
319 | ||
ca24a23e | 320 | static inline void audit_log_capset(const struct cred *new, |
d84f4f99 | 321 | const struct cred *old) |
e68b75a0 EP |
322 | { |
323 | if (unlikely(!audit_dummy_context())) | |
ca24a23e | 324 | __audit_log_capset(new, old); |
e68b75a0 EP |
325 | } |
326 | ||
120a795d AV |
327 | static inline void audit_mmap_fd(int fd, int flags) |
328 | { | |
329 | if (unlikely(!audit_dummy_context())) | |
330 | __audit_mmap_fd(fd, flags); | |
331 | } | |
332 | ||
471a5c7c | 333 | extern int audit_n_rules; |
e54dc243 | 334 | extern int audit_signals; |
d7e7528b | 335 | #else /* CONFIG_AUDITSYSCALL */ |
9321d526 KC |
336 | static inline int audit_alloc(struct task_struct *task) |
337 | { | |
338 | return 0; | |
339 | } | |
340 | static inline void audit_free(struct task_struct *task) | |
341 | { } | |
91397401 | 342 | static inline void audit_syscall_entry(int major, unsigned long a0, |
9321d526 KC |
343 | unsigned long a1, unsigned long a2, |
344 | unsigned long a3) | |
345 | { } | |
346 | static inline void audit_syscall_exit(void *pt_regs) | |
347 | { } | |
348 | static inline int audit_dummy_context(void) | |
349 | { | |
350 | return 1; | |
351 | } | |
7ac86265 JL |
352 | static inline struct filename *audit_reusename(const __user char *name) |
353 | { | |
354 | return NULL; | |
355 | } | |
91a27b2a | 356 | static inline void audit_getname(struct filename *name) |
9321d526 | 357 | { } |
adb5c247 JL |
358 | static inline void __audit_inode(struct filename *name, |
359 | const struct dentry *dentry, | |
79f6530c | 360 | unsigned int flags) |
9321d526 | 361 | { } |
c43a25ab | 362 | static inline void __audit_inode_child(const struct inode *parent, |
4fa6b5ec JL |
363 | const struct dentry *dentry, |
364 | const unsigned char type) | |
9321d526 | 365 | { } |
adb5c247 JL |
366 | static inline void audit_inode(struct filename *name, |
367 | const struct dentry *dentry, | |
bfcec708 | 368 | unsigned int parent) |
9321d526 | 369 | { } |
9f45f5bf AV |
370 | static inline void audit_file(struct file *file) |
371 | { | |
372 | } | |
79f6530c JL |
373 | static inline void audit_inode_parent_hidden(struct filename *name, |
374 | const struct dentry *dentry) | |
375 | { } | |
c43a25ab | 376 | static inline void audit_inode_child(const struct inode *parent, |
4fa6b5ec JL |
377 | const struct dentry *dentry, |
378 | const unsigned char type) | |
9321d526 KC |
379 | { } |
380 | static inline void audit_core_dumps(long signr) | |
381 | { } | |
382 | static inline void __audit_seccomp(unsigned long syscall, long signr, int code) | |
383 | { } | |
384 | static inline void audit_seccomp(unsigned long syscall, long signr, int code) | |
385 | { } | |
386 | static inline int auditsc_get_stamp(struct audit_context *ctx, | |
387 | struct timespec *t, unsigned int *serial) | |
388 | { | |
389 | return 0; | |
390 | } | |
391 | static inline kuid_t audit_get_loginuid(struct task_struct *tsk) | |
392 | { | |
393 | return INVALID_UID; | |
394 | } | |
b6cfee4c | 395 | static inline unsigned int audit_get_sessionid(struct task_struct *tsk) |
9321d526 KC |
396 | { |
397 | return -1; | |
398 | } | |
9321d526 KC |
399 | static inline void audit_ipc_obj(struct kern_ipc_perm *ipcp) |
400 | { } | |
401 | static inline void audit_ipc_set_perm(unsigned long qbytes, uid_t uid, | |
402 | gid_t gid, umode_t mode) | |
403 | { } | |
9410d228 RGB |
404 | static inline void audit_bprm(struct linux_binprm *bprm) |
405 | { } | |
2950fa9d CG |
406 | static inline int audit_socketcall(int nargs, unsigned long *args) |
407 | { | |
408 | return 0; | |
409 | } | |
9321d526 KC |
410 | static inline void audit_fd_pair(int fd1, int fd2) |
411 | { } | |
412 | static inline int audit_sockaddr(int len, void *addr) | |
413 | { | |
414 | return 0; | |
415 | } | |
416 | static inline void audit_mq_open(int oflag, umode_t mode, struct mq_attr *attr) | |
417 | { } | |
418 | static inline void audit_mq_sendrecv(mqd_t mqdes, size_t msg_len, | |
419 | unsigned int msg_prio, | |
420 | const struct timespec *abs_timeout) | |
421 | { } | |
422 | static inline void audit_mq_notify(mqd_t mqdes, | |
423 | const struct sigevent *notification) | |
424 | { } | |
425 | static inline void audit_mq_getsetattr(mqd_t mqdes, struct mq_attr *mqstat) | |
426 | { } | |
427 | static inline int audit_log_bprm_fcaps(struct linux_binprm *bprm, | |
428 | const struct cred *new, | |
429 | const struct cred *old) | |
430 | { | |
431 | return 0; | |
432 | } | |
ca24a23e EB |
433 | static inline void audit_log_capset(const struct cred *new, |
434 | const struct cred *old) | |
9321d526 KC |
435 | { } |
436 | static inline void audit_mmap_fd(int fd, int flags) | |
437 | { } | |
438 | static inline void audit_ptrace(struct task_struct *t) | |
439 | { } | |
471a5c7c | 440 | #define audit_n_rules 0 |
e54dc243 | 441 | #define audit_signals 0 |
d7e7528b | 442 | #endif /* CONFIG_AUDITSYSCALL */ |
1da177e4 | 443 | |
780a7654 EB |
444 | static inline bool audit_loginuid_set(struct task_struct *tsk) |
445 | { | |
446 | return uid_valid(audit_get_loginuid(tsk)); | |
447 | } | |
448 | ||
1da177e4 LT |
449 | #ifdef CONFIG_AUDIT |
450 | /* These are defined in audit.c */ | |
451 | /* Public API */ | |
b9075fa9 JP |
452 | extern __printf(4, 5) |
453 | void audit_log(struct audit_context *ctx, gfp_t gfp_mask, int type, | |
454 | const char *fmt, ...); | |
1da177e4 | 455 | |
9796fdd8 | 456 | extern struct audit_buffer *audit_log_start(struct audit_context *ctx, gfp_t gfp_mask, int type); |
b9075fa9 JP |
457 | extern __printf(2, 3) |
458 | void audit_log_format(struct audit_buffer *ab, const char *fmt, ...); | |
1da177e4 | 459 | extern void audit_log_end(struct audit_buffer *ab); |
de6bbd1d EP |
460 | extern int audit_string_contains_control(const char *string, |
461 | size_t len); | |
b556f8ad EP |
462 | extern void audit_log_n_hex(struct audit_buffer *ab, |
463 | const unsigned char *buf, | |
464 | size_t len); | |
465 | extern void audit_log_n_string(struct audit_buffer *ab, | |
466 | const char *buf, | |
467 | size_t n); | |
b556f8ad EP |
468 | extern void audit_log_n_untrustedstring(struct audit_buffer *ab, |
469 | const char *string, | |
470 | size_t n); | |
de6bbd1d | 471 | extern void audit_log_untrustedstring(struct audit_buffer *ab, |
83c7d091 | 472 | const char *string); |
1da177e4 LT |
473 | extern void audit_log_d_path(struct audit_buffer *ab, |
474 | const char *prefix, | |
66b3fad3 | 475 | const struct path *path); |
9d960985 EP |
476 | extern void audit_log_key(struct audit_buffer *ab, |
477 | char *key); | |
a51d9eaa KC |
478 | extern void audit_log_link_denied(const char *operation, |
479 | struct path *link); | |
522ed776 | 480 | extern void audit_log_lost(const char *message); |
131ad62d MDF |
481 | #ifdef CONFIG_SECURITY |
482 | extern void audit_log_secctx(struct audit_buffer *ab, u32 secid); | |
483 | #else | |
9321d526 KC |
484 | static inline void audit_log_secctx(struct audit_buffer *ab, u32 secid) |
485 | { } | |
131ad62d MDF |
486 | #endif |
487 | ||
b24a30a7 EP |
488 | extern int audit_log_task_context(struct audit_buffer *ab); |
489 | extern void audit_log_task_info(struct audit_buffer *ab, | |
490 | struct task_struct *tsk); | |
491 | ||
9d57a7f9 AD |
492 | extern int audit_update_lsm_rules(void); |
493 | ||
fe7752ba | 494 | /* Private API (for audit.c only) */ |
62062cf8 | 495 | extern int audit_filter_user(int type); |
fe7752ba | 496 | extern int audit_filter_type(int type); |
ce0d9f04 | 497 | extern int audit_rule_change(int type, __u32 portid, int seq, |
dc9eb698 | 498 | void *data, size_t datasz); |
099dd235 | 499 | extern int audit_list_rules_send(struct sk_buff *request_skb, int seq); |
ce0d9f04 | 500 | |
3e1d0bb6 | 501 | extern u32 audit_enabled; |
9321d526 KC |
502 | #else /* CONFIG_AUDIT */ |
503 | static inline __printf(4, 5) | |
504 | void audit_log(struct audit_context *ctx, gfp_t gfp_mask, int type, | |
505 | const char *fmt, ...) | |
506 | { } | |
507 | static inline struct audit_buffer *audit_log_start(struct audit_context *ctx, | |
508 | gfp_t gfp_mask, int type) | |
509 | { | |
510 | return NULL; | |
511 | } | |
512 | static inline __printf(2, 3) | |
513 | void audit_log_format(struct audit_buffer *ab, const char *fmt, ...) | |
514 | { } | |
515 | static inline void audit_log_end(struct audit_buffer *ab) | |
516 | { } | |
517 | static inline void audit_log_n_hex(struct audit_buffer *ab, | |
518 | const unsigned char *buf, size_t len) | |
519 | { } | |
520 | static inline void audit_log_n_string(struct audit_buffer *ab, | |
521 | const char *buf, size_t n) | |
522 | { } | |
523 | static inline void audit_log_n_untrustedstring(struct audit_buffer *ab, | |
524 | const char *string, size_t n) | |
525 | { } | |
526 | static inline void audit_log_untrustedstring(struct audit_buffer *ab, | |
527 | const char *string) | |
528 | { } | |
529 | static inline void audit_log_d_path(struct audit_buffer *ab, | |
530 | const char *prefix, | |
531 | const struct path *path) | |
532 | { } | |
533 | static inline void audit_log_key(struct audit_buffer *ab, char *key) | |
534 | { } | |
535 | static inline void audit_log_link_denied(const char *string, | |
536 | const struct path *link) | |
537 | { } | |
538 | static inline void audit_log_secctx(struct audit_buffer *ab, u32 secid) | |
539 | { } | |
b24a30a7 EP |
540 | static inline int audit_log_task_context(struct audit_buffer *ab) |
541 | { | |
542 | return 0; | |
543 | } | |
544 | static inline void audit_log_task_info(struct audit_buffer *ab, | |
545 | struct task_struct *tsk) | |
546 | { } | |
522ed776 | 547 | #define audit_enabled 0 |
9321d526 KC |
548 | #endif /* CONFIG_AUDIT */ |
549 | static inline void audit_log_string(struct audit_buffer *ab, const char *buf) | |
550 | { | |
551 | audit_log_n_string(ab, buf, strlen(buf)); | |
552 | } | |
553 | ||
1da177e4 | 554 | #endif |