diff options
| author | Eric Paris | 2013-04-30 21:30:32 +0200 |
|---|---|---|
| committer | Eric Paris | 2013-04-30 21:31:28 +0200 |
| commit | b24a30a7305418ff138ff51776fc555ec57c011a (patch) | |
| tree | 2c64cff75b758c3fb407118ab473167fb5bec3fa /kernel/auditfilter.c | |
| parent | audit: use spin_lock in audit_receive_msg to process tty logging (diff) | |
| download | kernel-qcow2-linux-b24a30a7305418ff138ff51776fc555ec57c011a.tar.gz kernel-qcow2-linux-b24a30a7305418ff138ff51776fc555ec57c011a.tar.xz kernel-qcow2-linux-b24a30a7305418ff138ff51776fc555ec57c011a.zip | |
audit: fix event coverage of AUDIT_ANOM_LINK
The userspace audit tools didn't like the existing formatting of the
AUDIT_ANOM_LINK event. It needed to be expanded to emit an AUDIT_PATH
event as well, so this implements the change. The bulk of the patch is
moving code out of auditsc.c into audit.c and audit.h for general use.
It expands audit_log_name to include an optional "struct path" argument
for the simple case of just needing to report a pathname. This also
makes
audit_log_task_info available when syscall auditing is not enabled,
since
it is needed in either case for process details.
Signed-off-by: Kees Cook <keescook@chromium.org>
Reported-by: Steve Grubb <sgrubb@redhat.com>
Diffstat (limited to 'kernel/auditfilter.c')
0 files changed, 0 insertions, 0 deletions