Something went wrong. Try again.
Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Something went wrong. Try again.
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154/* SPDX-License-Identifier: GPL-2.0 *//* * Common LSM logging functions * Heavily borrowed from selinux/avc.h * * Author : Etienne BASSET <etienne.basset@ensta.org> * * All credits to : Stephen Smalley * All BUGS to : Etienne BASSET <etienne.basset@ensta.org> */#ifndef _LSM_COMMON_LOGGING_#define _LSM_COMMON_LOGGING_
#include <linux/stddef.h>#include <linux/errno.h>#include <linux/kernel.h>#include <linux/kdev_t.h>#include <linux/spinlock.h>#include <linux/init.h>#include <linux/audit.h>#include <linux/in6.h>#include <linux/path.h>#include <linux/key.h>#include <linux/skbuff.h>#include <rdma/ib_verbs.h>
struct lsm_network_audit { int netif; const struct sock *sk; u16 family; __be16 dport; __be16 sport; union { struct { __be32 daddr; __be32 saddr; } v4; struct { struct in6_addr daddr; struct in6_addr saddr; } v6; } fam;};
struct lsm_ioctlop_audit { struct path path; u16 cmd;};
struct lsm_ibpkey_audit { u64 subnet_prefix; u16 pkey;};
struct lsm_ibendport_audit { const char *dev_name; u8 port;};
/* Auxiliary data to use in generating the audit record. */struct common_audit_data { char type;#define LSM_AUDIT_DATA_PATH 1#define LSM_AUDIT_DATA_NET 2#define LSM_AUDIT_DATA_CAP 3#define LSM_AUDIT_DATA_IPC 4#define LSM_AUDIT_DATA_TASK 5#define LSM_AUDIT_DATA_KEY 6#define LSM_AUDIT_DATA_NONE 7#define LSM_AUDIT_DATA_KMOD 8#define LSM_AUDIT_DATA_INODE 9#define LSM_AUDIT_DATA_DENTRY 10#define LSM_AUDIT_DATA_IOCTL_OP 11#define LSM_AUDIT_DATA_FILE 12#define LSM_AUDIT_DATA_IBPKEY 13#define LSM_AUDIT_DATA_IBENDPORT 14#define LSM_AUDIT_DATA_LOCKDOWN 15#define LSM_AUDIT_DATA_NOTIFICATION 16#define LSM_AUDIT_DATA_ANONINODE 17#define LSM_AUDIT_DATA_NLMSGTYPE 18 union { struct path path; struct dentry *dentry; struct inode *inode; struct lsm_network_audit *net; int cap; int ipc_id; struct task_struct *tsk;#ifdef CONFIG_KEYS struct { key_serial_t key; char *key_desc; } key_struct;#endif char *kmod_name; struct lsm_ioctlop_audit *op; const struct file *file; struct lsm_ibpkey_audit *ibpkey; struct lsm_ibendport_audit *ibendport; int reason; const char *anonclass; u16 nlmsg_type; } u; /* this union contains LSM specific data */ union {#ifdef CONFIG_SECURITY_SMACK struct smack_audit_data *smack_audit_data;#endif#ifdef CONFIG_SECURITY_SELINUX struct selinux_audit_data *selinux_audit_data;#endif#ifdef CONFIG_SECURITY_APPARMOR struct apparmor_audit_data *apparmor_audit_data;#endif }; /* per LSM data pointer union */};
#define v4info fam.v4#define v6info fam.v6
#ifdef CONFIG_AUDIT
int ipv4_skb_to_auditdata(struct sk_buff *skb, struct common_audit_data *ad, u8 *proto);
#if IS_ENABLED(CONFIG_IPV6)int ipv6_skb_to_auditdata(struct sk_buff *skb, struct common_audit_data *ad, u8 *proto);#endif /* IS_ENABLED(CONFIG_IPV6) */
void common_lsm_audit(struct common_audit_data *a, void (*pre_audit)(struct audit_buffer *, void *), void (*post_audit)(struct audit_buffer *, void *));
void audit_log_lsm_data(struct audit_buffer *ab, const struct common_audit_data *a);
#else /* CONFIG_AUDIT */
static inline void common_lsm_audit(struct common_audit_data *a, void (*pre_audit)(struct audit_buffer *, void *), void (*post_audit)(struct audit_buffer *, void *)){}
static inline void audit_log_lsm_data(struct audit_buffer *ab, const struct common_audit_data *a){}
#endif /* CONFIG_AUDIT */
#endif