mirror of https://github.com/Qortal/Brooklyn
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
69 lines
1.9 KiB
69 lines
1.9 KiB
// SPDX-License-Identifier: GPL-2.0-only |
|
/* |
|
* Copyright (C) 2008 IBM Corporation |
|
* Author: Mimi Zohar <[email protected]> |
|
* |
|
* File: integrity_audit.c |
|
* Audit calls for the integrity subsystem |
|
*/ |
|
|
|
#include <linux/fs.h> |
|
#include <linux/gfp.h> |
|
#include <linux/audit.h> |
|
#include "integrity.h" |
|
|
|
static int integrity_audit_info; |
|
|
|
/* ima_audit_setup - enable informational auditing messages */ |
|
static int __init integrity_audit_setup(char *str) |
|
{ |
|
unsigned long audit; |
|
|
|
if (!kstrtoul(str, 0, &audit)) |
|
integrity_audit_info = audit ? 1 : 0; |
|
return 1; |
|
} |
|
__setup("integrity_audit=", integrity_audit_setup); |
|
|
|
void integrity_audit_msg(int audit_msgno, struct inode *inode, |
|
const unsigned char *fname, const char *op, |
|
const char *cause, int result, int audit_info) |
|
{ |
|
integrity_audit_message(audit_msgno, inode, fname, op, cause, |
|
result, audit_info, 0); |
|
} |
|
|
|
void integrity_audit_message(int audit_msgno, struct inode *inode, |
|
const unsigned char *fname, const char *op, |
|
const char *cause, int result, int audit_info, |
|
int errno) |
|
{ |
|
struct audit_buffer *ab; |
|
char name[TASK_COMM_LEN]; |
|
|
|
if (!integrity_audit_info && audit_info == 1) /* Skip info messages */ |
|
return; |
|
|
|
ab = audit_log_start(audit_context(), GFP_KERNEL, audit_msgno); |
|
if (!ab) |
|
return; |
|
audit_log_format(ab, "pid=%d uid=%u auid=%u ses=%u", |
|
task_pid_nr(current), |
|
from_kuid(&init_user_ns, current_uid()), |
|
from_kuid(&init_user_ns, audit_get_loginuid(current)), |
|
audit_get_sessionid(current)); |
|
audit_log_task_context(ab); |
|
audit_log_format(ab, " op=%s cause=%s comm=", op, cause); |
|
audit_log_untrustedstring(ab, get_task_comm(name, current)); |
|
if (fname) { |
|
audit_log_format(ab, " name="); |
|
audit_log_untrustedstring(ab, fname); |
|
} |
|
if (inode) { |
|
audit_log_format(ab, " dev="); |
|
audit_log_untrustedstring(ab, inode->i_sb->s_id); |
|
audit_log_format(ab, " ino=%lu", inode->i_ino); |
|
} |
|
audit_log_format(ab, " res=%d errno=%d", !result, errno); |
|
audit_log_end(ab); |
|
}
|
|
|