audit.c (1213B)
1#include <linux/init.h> 2#include <linux/types.h> 3#include <linux/audit.h> 4#include <asm/unistd.h> 5 6static unsigned dir_class[] = { 7#include <asm-generic/audit_dir_write.h> 8~0U 9}; 10 11static unsigned read_class[] = { 12#include <asm-generic/audit_read.h> 13~0U 14}; 15 16static unsigned write_class[] = { 17#include <asm-generic/audit_write.h> 18~0U 19}; 20 21static unsigned chattr_class[] = { 22#include <asm-generic/audit_change_attr.h> 23~0U 24}; 25 26static unsigned signal_class[] = { 27#include <asm-generic/audit_signal.h> 28~0U 29}; 30 31int audit_classify_arch(int arch) 32{ 33 return 0; 34} 35 36int audit_classify_syscall(int abi, unsigned syscall) 37{ 38 switch(syscall) { 39 case __NR_open: 40 return AUDITSC_OPEN; 41 case __NR_openat: 42 return AUDITSC_OPENAT; 43 case __NR_execve: 44 return AUDITSC_EXECVE; 45 case __NR_openat2: 46 return AUDITSC_OPENAT2; 47 default: 48 return AUDITSC_NATIVE; 49 } 50} 51 52static int __init audit_classes_init(void) 53{ 54 audit_register_class(AUDIT_CLASS_WRITE, write_class); 55 audit_register_class(AUDIT_CLASS_READ, read_class); 56 audit_register_class(AUDIT_CLASS_DIR_WRITE, dir_class); 57 audit_register_class(AUDIT_CLASS_CHATTR, chattr_class); 58 audit_register_class(AUDIT_CLASS_SIGNAL, signal_class); 59 return 0; 60} 61 62__initcall(audit_classes_init);