audit.h File Reference

#include <linux/fs.h>
#include <linux/audit.h>
#include <linux/skbuff.h>

Go to the source code of this file.

Data Structures
struct	audit_entry
struct	audit_netlink_list

Macros
#define	AUDIT_DEBUG   0
#define	AUDIT_INODE_BUCKETS   32
#define	AUDIT_NAME_FULL   -1
#define	audit_put_watch(w)   {}
#define	audit_get_watch(w)   {}
#define	audit_to_watch(k, p, l, o)   (-EINVAL)
#define	audit_add_watch(k, l)   (-EINVAL)
#define	audit_remove_watch_rule(k)   BUG()
#define	audit_watch_path(w)   ""
#define	audit_watch_compare(w, i, d)   0
#define	audit_remove_tree_rule(rule)   BUG()
#define	audit_add_tree_rule(rule)   -EINVAL
#define	audit_make_tree(rule, str, op)   -EINVAL
#define	audit_trim_trees()   (void)0
#define	audit_put_tree(tree)   (void)0
#define	audit_tag_tree(old, new)   -EINVAL
#define	audit_tree_path(rule)   "" /* never called */
#define	audit_kill_trees(list)   BUG()
#define	audit_signal_info(s, t)   AUDIT_DISABLED
#define	audit_filter_inodes(t, c)   AUDIT_DISABLED

Enumerations
enum	audit_state { AUDIT_DISABLED, AUDIT_BUILD_CONTEXT, AUDIT_RECORD_CONTEXT }

Functions
int	audit_match_class (int class, unsigned syscall)
int	audit_comparator (const u32 left, const u32 op, const u32 right)
int	audit_uid_comparator (kuid_t left, u32 op, kuid_t right)
int	audit_gid_comparator (kgid_t left, u32 op, kgid_t right)
int	parent_len (const char *path)
int	audit_compare_dname_path (const char *dname, const char *path, int plen)
struct sk_buff *	audit_make_reply (int pid, int seq, int type, int done, int multi, const void *payload, int size)
void	audit_panic (const char *message)
int	audit_send_list (void *)
int	selinux_audit_rule_update (void)
void	audit_free_rule_rcu (struct rcu_head *)
struct audit_entry *	audit_dupe_rule (struct audit_krule *old)
char *	audit_unpack_string (void **, size_t *, size_t)

Variables
int	audit_pid
struct list_head	audit_inode_hash [AUDIT_INODE_BUCKETS]
struct mutex	audit_filter_mutex
struct list_head	audit_filter_list []
pid_t	audit_sig_pid
kuid_t	audit_sig_uid
u32	audit_sig_sid
struct mutex	audit_cmd_mutex

Macro Definition Documentation

#define audit_add_tree_rule

(

rule

)

-EINVAL

Definition at line 140 of file audit.h.

#define audit_add_watch	(		k,
			l
	)		(-EINVAL)

Definition at line 119 of file audit.h.

#define AUDIT_DEBUG   0

Definition at line 30 of file audit.h.

#define audit_filter_inodes	(		t,
			c
	)		AUDIT_DISABLED

Definition at line 168 of file audit.h.

#define audit_get_watch

(

w

)

{}

Definition at line 117 of file audit.h.

#define AUDIT_INODE_BUCKETS   32

Definition at line 69 of file audit.h.

#define audit_kill_trees

(

list

)

BUG()

Definition at line 146 of file audit.h.

#define audit_make_tree	(		rule,
			str,
			op
	)		-EINVAL

Definition at line 141 of file audit.h.

#define AUDIT_NAME_FULL   -1

Definition at line 78 of file audit.h.

#define audit_put_tree

(

tree

)

(void)0

Definition at line 143 of file audit.h.

#define audit_put_watch

(

w

)

{}

Definition at line 116 of file audit.h.

#define audit_remove_tree_rule

(

rule

)

BUG()

Definition at line 139 of file audit.h.

#define audit_remove_watch_rule

(

k

)

BUG()

Definition at line 120 of file audit.h.

#define audit_signal_info	(		s,
			t
	)		AUDIT_DISABLED

Definition at line 167 of file audit.h.

#define audit_tag_tree	(		old,
			new
	)		-EINVAL

Definition at line 144 of file audit.h.

#define audit_to_watch	(		k,
			p,
			l,
			o
	)		(-EINVAL)

Definition at line 118 of file audit.h.

#define audit_tree_path

(

rule

)

"" /* never called */

Definition at line 145 of file audit.h.

#define audit_trim_trees

(

void

)

(void)0

Definition at line 142 of file audit.h.

#define audit_watch_compare	(		w,
			i,
			d
	)		0

Definition at line 122 of file audit.h.

#define audit_watch_path

(

w

)

""

Definition at line 121 of file audit.h.

Enumeration Type Documentation

enum audit_state

Enumerator:

AUDIT_DISABLED
AUDIT_BUILD_CONTEXT
AUDIT_RECORD_CONTEXT

Definition at line 35 of file audit.h.

Function Documentation

int audit_comparator	(	const u32	left,
		const u32	op,
		const u32	right
	)

Definition at line 1230 of file auditfilter.c.

int audit_compare_dname_path	(	const char *	dname,
		const char *	path,
		int	parentlen
	)

audit_compare_dname_path - compare given dentry name with last component in given path. Return of 0 indicates a match. : dentry name that we're comparing : full pathname that we're comparing : length of the parent if known. Passing in AUDIT_NAME_FULL here indicates that we must compute this value.

Definition at line 1339 of file auditfilter.c.

struct audit_entry* audit_dupe_rule ( struct audit_krule *  old )

read

Definition at line 810 of file auditfilter.c.

void audit_free_rule_rcu

(

struct rcu_head *

)

Definition at line 89 of file auditfilter.c.

int audit_gid_comparator	(	kgid_t	left,
		u32	op,
		kgid_t	right
	)

Definition at line 1278 of file auditfilter.c.

struct sk_buff* audit_make_reply ( int  pid, int  seq, int  type, int  done, int  multi, const void *  payload, int  size  )

read

Definition at line 489 of file audit.c.

int audit_match_class	(	int	class,
		unsigned	syscall
	)

Definition at line 178 of file auditfilter.c.

void audit_panic

(

const char *

message

)

Definition at line 178 of file audit.c.

int audit_send_list

(

void *

)

Definition at line 471 of file audit.c.

int audit_uid_comparator	(	kuid_t	left,
		u32	op,
		kuid_t	right
	)

Definition at line 1255 of file auditfilter.c.

char* audit_unpack_string	(	void **	,
		size_t *	,
		size_t
	)

Definition at line 117 of file auditfilter.c.

int parent_len

(

const char *

path

)

parent_len - find the length of the parent portion of a pathname : pathname of which to determine length

Definition at line 1305 of file auditfilter.c.

int selinux_audit_rule_update

(

void

)

Variable Documentation

struct mutex audit_cmd_mutex

struct list_head audit_filter_list[]

Definition at line 48 of file auditfilter.c.

struct mutex audit_filter_mutex

struct list_head audit_inode_hash[AUDIT_INODE_BUCKETS]

Definition at line 125 of file audit.c.

int audit_pid

Definition at line 94 of file audit.c.

pid_t audit_sig_pid

Definition at line 109 of file audit.c.

u32 audit_sig_sid

Definition at line 110 of file audit.c.

kuid_t audit_sig_uid

Definition at line 108 of file audit.c.