linux-imx

/* SPDX-License-Identifier: GPL-2.0-or-later */

/* audit -- definition of audit_context structure and supporting types 

 *

 * Copyright 2003-2004 Red Hat, Inc.

 * Copyright 2005 Hewlett-Packard Development Company, L.P.

 * Copyright 2005 IBM Corporation

 */

​

#include <linux/fs.h>

#include <linux/audit.h>

#include <linux/skbuff.h>

#include <uapi/linux/mqueue.h>

#include <linux/tty.h>

​

/* AUDIT_NAMES is the number of slots we reserve in the audit_context

 * for saving names from getname().  If we get more names we will allocate

 * a name dynamically and also add those to the list anchored by names_list. */

#define AUDIT_NAMES 5

​

/* At task start time, the audit_state is set in the audit_context using

   a per-task filter.  At syscall entry, the audit_state is augmented by

   the syscall filter. */

enum audit_state {

    AUDIT_DISABLED,     /* Do not create per-task audit_context.

                 * No syscall-specific audit records can

                 * be generated. */

    AUDIT_BUILD_CONTEXT,    /* Create the per-task audit_context,

                 * and fill it in at syscall

                 * entry time.  This makes a full

                 * syscall record available if some

                 * other part of the kernel decides it

                 * should be recorded. */

    AUDIT_RECORD_CONTEXT    /* Create the per-task audit_context,

                 * always fill it in at syscall entry

                 * time, and always write out the audit

                 * record at syscall exit time.  */

};

​

/* Rule lists */

struct audit_watch;

struct audit_fsnotify_mark;

struct audit_tree;

struct audit_chunk;

​

struct audit_entry {

    struct list_head    list;

    struct rcu_head     rcu;

    struct audit_krule  rule;

};

​

struct audit_cap_data {

    kernel_cap_t        permitted;

    kernel_cap_t        inheritable;

    union {

        unsigned int    fE;     /* effective bit of file cap */

        kernel_cap_t    effective;  /* effective set of process */

    };

    kernel_cap_t        ambient;

    kuid_t          rootid;

};

​

/* When fs/namei.c:getname() is called, we store the pointer in name and bump

 * the refcnt in the associated filename struct.

 *

 * Further, in fs/namei.c:path_lookup() we store the inode and device.

 */

struct audit_names {

    struct list_head    list;       /* audit_context->names_list */

​

    struct filename     *name;

    int         name_len;   /* number of chars to log */

    bool            hidden;     /* don't log this record */

​

    unsigned long       ino;

    dev_t           dev;

    umode_t         mode;

    kuid_t          uid;

    kgid_t          gid;

    dev_t           rdev;

    u32         osid;

    struct audit_cap_data   fcap;

    unsigned int        fcap_ver;

    unsigned char       type;       /* record type */

    /*

     * This was an allocated audit_names and not from the array of

     * names allocated in the task audit context.  Thus this name

     * should be freed on syscall exit.

     */

    bool            should_free;

};

​

struct audit_proctitle {