| 1 | #include <linux/init.h>
|
| 2 | #include <linux/types.h>
|
| 3 | #include <linux/audit.h>
|
| 4 | #include <asm/unistd.h>
|
| 5 |
|
| 6 | static unsigned dir_class[] = {
|
| 7 | #include <asm-generic/audit_dir_write.h>
|
| 8 | ~0U
|
| 9 | };
|
| 10 |
|
| 11 | static unsigned read_class[] = {
|
| 12 | #include <asm-generic/audit_read.h>
|
| 13 | ~0U
|
| 14 | };
|
| 15 |
|
| 16 | static unsigned write_class[] = {
|
| 17 | #include <asm-generic/audit_write.h>
|
| 18 | ~0U
|
| 19 | };
|
| 20 |
|
| 21 | static unsigned chattr_class[] = {
|
| 22 | #include <asm-generic/audit_change_attr.h>
|
| 23 | ~0U
|
| 24 | };
|
| 25 |
|
| 26 | static unsigned signal_class[] = {
|
| 27 | #include <asm-generic/audit_signal.h>
|
| 28 | ~0U
|
| 29 | };
|
| 30 |
|
| 31 | int audit_classify_arch(int arch)
|
| 32 | {
|
| 33 | return 0;
|
| 34 | }
|
| 35 |
|
| 36 | int audit_classify_syscall(int abi, unsigned syscall)
|
| 37 | {
|
| 38 | switch(syscall) {
|
| 39 | case __NR_open:
|
| 40 | return 2;
|
| 41 | #ifdef __NR_openat
|
| 42 | case __NR_openat:
|
| 43 | return 3;
|
| 44 | #endif
|
| 45 | #ifdef __NR_socketcall
|
| 46 | case __NR_socketcall:
|
| 47 | return 4;
|
| 48 | #endif
|
| 49 | case __NR_execve:
|
| 50 | return 5;
|
| 51 | default:
|
| 52 | return 0;
|
| 53 | }
|
| 54 | }
|
| 55 |
|
| 56 | static int __init audit_classes_init(void)
|
| 57 | {
|
| 58 | audit_register_class(AUDIT_CLASS_WRITE, write_class);
|
| 59 | audit_register_class(AUDIT_CLASS_READ, read_class);
|
| 60 | audit_register_class(AUDIT_CLASS_DIR_WRITE, dir_class);
|
| 61 | audit_register_class(AUDIT_CLASS_CHATTR, chattr_class);
|
| 62 | audit_register_class(AUDIT_CLASS_SIGNAL, signal_class);
|
| 63 | return 0;
|
| 64 | }
|
| 65 |
|
| 66 | __initcall(audit_classes_init);
|