linux-imx

/* audit -- definition of audit_context structure and supporting types 

 *

 * Copyright 2003-2004 Red Hat, Inc.

 * Copyright 2005 Hewlett-Packard Development Company, L.P.

 * Copyright 2005 IBM Corporation

 *

 * This program is free software; you can redistribute it and/or modify

 * it under the terms of the GNU General Public License as published by

 * the Free Software Foundation; either version 2 of the License, or

 * (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful,

 * but WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 * GNU General Public License for more details.

 *

 * You should have received a copy of the GNU General Public License

 * along with this program; if not, write to the Free Software

 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA

 */

​

#include <linux/fs.h>

#include <linux/audit.h>

#include <linux/skbuff.h>

#include <uapi/linux/mqueue.h>

#include <linux/tty.h>

​

/* AUDIT_NAMES is the number of slots we reserve in the audit_context

 * for saving names from getname().  If we get more names we will allocate

 * a name dynamically and also add those to the list anchored by names_list. */

#define AUDIT_NAMES 5

​

/* At task start time, the audit_state is set in the audit_context using

   a per-task filter.  At syscall entry, the audit_state is augmented by

   the syscall filter. */

enum audit_state {

    AUDIT_DISABLED,     /* Do not create per-task audit_context.

                 * No syscall-specific audit records can

                 * be generated. */

    AUDIT_BUILD_CONTEXT,    /* Create the per-task audit_context,

                 * and fill it in at syscall

                 * entry time.  This makes a full

                 * syscall record available if some

                 * other part of the kernel decides it

                 * should be recorded. */

    AUDIT_RECORD_CONTEXT    /* Create the per-task audit_context,

                 * always fill it in at syscall entry

                 * time, and always write out the audit

                 * record at syscall exit time.  */

};

​

/* Rule lists */

struct audit_watch;

struct audit_fsnotify_mark;

struct audit_tree;

struct audit_chunk;

​

struct audit_entry {

    struct list_head    list;

    struct rcu_head     rcu;

    struct audit_krule  rule;

};

​