History

audit: Report suspicious O_CREAT usage

This renames the very specific audit_log_link_denied() to audit_log_path_denied() and adds the AUDIT_* type as an argument. This allows for the creation of the new AUDIT_ANOM_CREAT that can be used to report the fifo/regular file creation restrictions that were introduced in commit 30aba6656f61 ("namei: allow restricted O_CREAT of FIFOs and regular files").

Kees Cook committed 7 years ago

Commit 245d7361 parent 54ecb8f4 files · +16 −9Browse files

Showing the changes to include/linux (1 of 4 files). Show all

Unified · Split

include/linux/audit.h+3−2
@@ -156,7 +156,8 @@ extern void audit_log_d_path(struct audit_buffer *ab, · 155 unmodified lines
156 const struct path *path);156 const struct path *path);
157extern void audit_log_key(struct audit_buffer *ab,157extern void audit_log_key(struct audit_buffer *ab,
158 char *key);158 char *key);
159extern void audit_log_link_denied(const char *operation);159extern void audit_log_path_denied(int type,
160 const char *operation);
160extern void audit_log_lost(const char *message);161extern void audit_log_lost(const char *message);
161 162
162extern int audit_log_task_context(struct audit_buffer *ab);163extern int audit_log_task_context(struct audit_buffer *ab);
@@ -217,7 +218,7 @@ static inline void audit_log_d_path(struct audit_buffer *ab, · 54 unmodified lines
217{ }218{ }
218static inline void audit_log_key(struct audit_buffer *ab, char *key)219static inline void audit_log_key(struct audit_buffer *ab, char *key)
219{ }220{ }
220static inline void audit_log_link_denied(const char *string)221static inline void audit_log_path_denied(int type, const char *operation)
221{ }222{ }
222static inline int audit_log_task_context(struct audit_buffer *ab)223static inline int audit_log_task_context(struct audit_buffer *ab)
223{224{

Keyboard shortcuts

General

Show keyboard shortcuts
?
Focus the current search
/

Issues and pull requests

Open filters
f

Issues, pull requests and Inbox

Select next item
j↓
Select previous item
k↑
Open selected item
Enter
Dismiss filters or clear selection
Esc

Repository code

Go to file
t