mbox series

[0/2] audit: add support for openat2

Message ID cover.1616031035.git.rgb@redhat.com (mailing list archive)
Headers show
Series audit: add support for openat2 | expand

Message

Richard Guy Briggs March 18, 2021, 1:47 a.m. UTC 
The openat2(2) syscall was added in v5.6.  Add support for openat2 to the
audit syscall classifier and for recording openat2 parameters that cannot
be captured in the syscall parameters of the SYSCALL record.

Supporting userspace code can be found in
https://github.com/rgbriggs/audit-userspace/tree/ghau-openat2

Supporting test case can be found in
https://github.com/linux-audit/audit-testsuite/pull/103

Richard Guy Briggs (2):
  audit: add support for the openat2 syscall
  audit: add OPENAT2 record to list how

 arch/alpha/kernel/audit.c          |  2 ++
 arch/ia64/kernel/audit.c           |  2 ++
 arch/parisc/kernel/audit.c         |  2 ++
 arch/parisc/kernel/compat_audit.c  |  2 ++
 arch/powerpc/kernel/audit.c        |  2 ++
 arch/powerpc/kernel/compat_audit.c |  2 ++
 arch/s390/kernel/audit.c           |  2 ++
 arch/s390/kernel/compat_audit.c    |  2 ++
 arch/sparc/kernel/audit.c          |  2 ++
 arch/sparc/kernel/compat_audit.c   |  2 ++
 arch/x86/ia32/audit.c              |  2 ++
 arch/x86/kernel/audit_64.c         |  2 ++
 fs/open.c                          |  2 ++
 include/linux/audit.h              | 10 ++++++++++
 include/uapi/linux/audit.h         |  1 +
 kernel/audit.h                     |  2 ++
 kernel/auditsc.c                   | 19 +++++++++++++++++++
 lib/audit.c                        |  4 ++++
 lib/compat_audit.c                 |  4 ++++
 19 files changed, 66 insertions(+)

Comments

Christian Brauner March 18, 2021, 10:49 a.m. UTC | #1 
On Wed, Mar 17, 2021 at 09:47:16PM -0400, Richard Guy Briggs wrote:
> The openat2(2) syscall was added in v5.6.  Add support for openat2 to the
> audit syscall classifier and for recording openat2 parameters that cannot
> be captured in the syscall parameters of the SYSCALL record.
> 
> Supporting userspace code can be found in
> https://github.com/rgbriggs/audit-userspace/tree/ghau-openat2
> 
> Supporting test case can be found in
> https://github.com/linux-audit/audit-testsuite/pull/103

Seems sensible, thank you.