Source
254
254
extern struct audit_entry *audit_dupe_rule(struct audit_krule *old);
255
255
256
256
extern void audit_log_d_path_exe(struct audit_buffer *ab,
257
257
struct mm_struct *mm);
258
258
259
259
extern struct tty_struct *audit_get_tty(void);
260
260
extern void audit_put_tty(struct tty_struct *tty);
261
261
262
262
/* audit watch/mark/tree functions */
263
263
#ifdef CONFIG_AUDITSYSCALL
264
+
extern unsigned int audit_serial(void);
265
+
extern int auditsc_get_stamp(struct audit_context *ctx,
266
+
struct timespec64 *t, unsigned int *serial);
267
+
264
268
extern void audit_put_watch(struct audit_watch *watch);
265
269
extern void audit_get_watch(struct audit_watch *watch);
266
270
extern int audit_to_watch(struct audit_krule *krule, char *path, int len,
267
271
u32 op);
268
272
extern int audit_add_watch(struct audit_krule *krule, struct list_head **list);
269
273
extern void audit_remove_watch_rule(struct audit_krule *krule);
270
274
extern char *audit_watch_path(struct audit_watch *watch);
271
275
extern int audit_watch_compare(struct audit_watch *watch, unsigned long ino,
272
276
dev_t dev);
273
277
293
297
extern int audit_tag_tree(char *old, char *new);
294
298
extern const char *audit_tree_path(struct audit_tree *tree);
295
299
extern void audit_put_tree(struct audit_tree *tree);
296
300
extern void audit_kill_trees(struct audit_context *context);
297
301
298
302
extern int audit_signal_info(int sig, struct task_struct *t);
299
303
extern void audit_filter_inodes(struct task_struct *tsk,
300
304
struct audit_context *ctx);
301
305
extern struct list_head *audit_killed_trees(void);
302
306
#else /* CONFIG_AUDITSYSCALL */
307
+
#define auditsc_get_stamp(c, t, s) 0
303
308
#define audit_put_watch(w) {}
304
309
#define audit_get_watch(w) {}
305
310
#define audit_to_watch(k, p, l, o) (-EINVAL)
306
311
#define audit_add_watch(k, l) (-EINVAL)
307
312
#define audit_remove_watch_rule(k) BUG()
308
313
#define audit_watch_path(w) ""
309
314
#define audit_watch_compare(w, i, d) 0
310
315
311
316
#define audit_alloc_mark(k, p, l) (ERR_PTR(-EINVAL))
312
317
#define audit_mark_path(m) ""