1c30e3af8a
The openat2(2) syscall was added in kernel v5.6 with commit
fddb5d430a ("open: introduce openat2(2) syscall").
Add the openat2(2) syscall to the audit syscall classifier.
Link: https://github.com/linux-audit/audit-kernel/issues/67
Link: https://lore.kernel.org/r/f5f1a4d8699613f8c02ce762807228c841c2e26f.1621363275.git.rgb@redhat.com
Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Acked-by: Christian Brauner <christian.brauner@ubuntu.com>
[PM: merge fuzz due to previous header rename, commit line wraps]
Signed-off-by: Paul Moore <paul@paul-moore.com>
57 lines
1,002 B
C
57 lines
1,002 B
C
// SPDX-License-Identifier: GPL-2.0
|
|
#include <linux/init.h>
|
|
#include <linux/types.h>
|
|
#include <linux/audit_arch.h>
|
|
#include <asm/unistd32.h>
|
|
|
|
unsigned compat_dir_class[] = {
|
|
#include <asm-generic/audit_dir_write.h>
|
|
~0U
|
|
};
|
|
|
|
unsigned compat_read_class[] = {
|
|
#include <asm-generic/audit_read.h>
|
|
~0U
|
|
};
|
|
|
|
unsigned compat_write_class[] = {
|
|
#include <asm-generic/audit_write.h>
|
|
~0U
|
|
};
|
|
|
|
unsigned compat_chattr_class[] = {
|
|
#include <asm-generic/audit_change_attr.h>
|
|
~0U
|
|
};
|
|
|
|
unsigned compat_signal_class[] = {
|
|
#include <asm-generic/audit_signal.h>
|
|
~0U
|
|
};
|
|
|
|
int audit_classify_compat_syscall(int abi, unsigned syscall)
|
|
{
|
|
switch (syscall) {
|
|
#ifdef __NR_open
|
|
case __NR_open:
|
|
return AUDITSC_OPEN;
|
|
#endif
|
|
#ifdef __NR_openat
|
|
case __NR_openat:
|
|
return AUDITSC_OPENAT;
|
|
#endif
|
|
#ifdef __NR_socketcall
|
|
case __NR_socketcall:
|
|
return AUDITSC_SOCKETCALL;
|
|
#endif
|
|
case __NR_execve:
|
|
return AUDITSC_EXECVE;
|
|
#ifdef __NR_openat2
|
|
case __NR_openat2:
|
|
return AUDITSC_OPENAT2;
|
|
#endif
|
|
default:
|
|
return AUDITSC_COMPAT;
|
|
}
|
|
}
|