History

audit: Report suspicious O_CREAT usage

This renames the very specific audit_log_link_denied() to audit_log_path_denied() and adds the AUDIT_* type as an argument. This allows for the creation of the new AUDIT_ANOM_CREAT that can be used to report the fifo/regular file creation restrictions that were introduced in commit 30aba6656f61 ("namei: allow restricted O_CREAT of FIFOs and regular files").

Kees Cook committed 7 years ago

Commit 245d7361 parent 54ecb8f4 files · +16 −9Browse files

Showing the changes to include/linux (1 of 4 files). Show all

Unified · Split

include/linux/audit.h+3−2
@@ -156,7 +156,8 @@ extern void audit_log_d_path(struct audit_buffer *ab, · 155 unmodified lines
156156 const struct path *path);
157157 extern void audit_log_key(struct audit_buffer *ab,
158158 char *key);
159−extern void audit_log_link_denied(const char *operation);
159+extern void audit_log_path_denied(int type,
160+ const char *operation);
160161 extern void audit_log_lost(const char *message);
161162
162163 extern int audit_log_task_context(struct audit_buffer *ab);
@@ -217,7 +218,7 @@ static inline void audit_log_d_path(struct audit_buffer *ab, · 54 unmodified lines
217218 { }
218219 static inline void audit_log_key(struct audit_buffer *ab, char *key)
219220 { }
220−static inline void audit_log_link_denied(const char *string)
221+static inline void audit_log_path_denied(int type, const char *operation)
221222 { }
222223 static inline int audit_log_task_context(struct audit_buffer *ab)
223224 {

Keyboard shortcuts

General

Show keyboard shortcuts
?
Focus the current search
/

Issues and pull requests

Open filters
f

Issues, pull requests and Inbox

Select next item
j↓
Select previous item
k↑
Open selected item
Enter
Dismiss filters or clear selection
Esc

Repository code

Go to file
t