| From: |
| Richard Guy Briggs <rgb-AT-redhat.com> |
| To: |
| Linux-Audit Mailing List <linux-audit-AT-redhat.com>, LKML <linux-kernel-AT-vger.kernel.org>, linux-fsdevel-AT-vger.kernel.org |
| Subject: |
| [PATCH v2 0/3] audit: add support for openat2 |
| Date: |
| Fri, 30 Apr 2021 13:29:34 -0400 |
| Message-ID: |
| <cover.1619729297.git.rgb@redhat.com> |
| Cc: |
| Paul Moore <paul-AT-paul-moore.com>, Eric Paris <eparis-AT-parisplace.org>, Steve Grubb <sgrubb-AT-redhat.com>, Richard Guy Briggs <rgb-AT-redhat.com>, Alexander Viro <viro-AT-zeniv.linux.org.uk>, Eric Paris <eparis-AT-redhat.com>, x86-AT-kernel.org, linux-alpha-AT-vger.kernel.org, linux-ia64-AT-vger.kernel.org, linux-parisc-AT-vger.kernel.org, linuxppc-dev-AT-lists.ozlabs.org, linux-s390-AT-vger.kernel.org, sparclinux-AT-vger.kernel.org, Aleksa Sarai <cyphar-AT-cyphar.com> |
| Archive-link: |
| Article |
The openat2(2) syscall was added in v5.6. Add support for openat2 to the
audit syscall classifier and for recording openat2 parameters that cannot
be captured in the syscall parameters of the SYSCALL record.
Supporting userspace code can be found in
https://github.com/rgbriggs/audit-userspace/tree/ghau-ope...
Supporting test case can be found in
https://github.com/linux-audit/audit-testsuite/pull/103
Richard Guy Briggs (3):
audit: replace magic audit syscall class numbers with macros
audit: add support for the openat2 syscall
audit: add OPENAT2 record to list how
arch/alpha/kernel/audit.c | 10 ++++++----
arch/ia64/kernel/audit.c | 10 ++++++----
arch/parisc/kernel/audit.c | 10 ++++++----
arch/parisc/kernel/compat_audit.c | 11 +++++++----
arch/powerpc/kernel/audit.c | 12 +++++++-----
arch/powerpc/kernel/compat_audit.c | 13 ++++++++-----
arch/s390/kernel/audit.c | 12 +++++++-----
arch/s390/kernel/compat_audit.c | 13 ++++++++-----
arch/sparc/kernel/audit.c | 12 +++++++-----
arch/sparc/kernel/compat_audit.c | 13 ++++++++-----
arch/x86/ia32/audit.c | 13 ++++++++-----
arch/x86/kernel/audit_64.c | 10 ++++++----
fs/open.c | 2 ++
include/linux/audit.h | 11 +++++++++++
include/linux/auditscm.h | 24 +++++++++++++++++++++++
include/uapi/linux/audit.h | 1 +
kernel/audit.h | 2 ++
kernel/auditsc.c | 31 ++++++++++++++++++++++++------
lib/audit.c | 14 +++++++++-----
lib/compat_audit.c | 15 ++++++++++-----
20 files changed, 168 insertions(+), 71 deletions(-)
create mode 100644 include/linux/auditscm.h
--
2.27.0
