audit.c (1249B)
1// SPDX-License-Identifier: GPL-2.0 2#include <linux/init.h> 3#include <linux/types.h> 4#include <linux/audit.h> 5#include <asm/unistd.h> 6 7static unsigned dir_class[] = { 8#include <asm-generic/audit_dir_write.h> 9~0U 10}; 11 12static unsigned read_class[] = { 13#include <asm-generic/audit_read.h> 14~0U 15}; 16 17static unsigned write_class[] = { 18#include <asm-generic/audit_write.h> 19~0U 20}; 21 22static unsigned chattr_class[] = { 23#include <asm-generic/audit_change_attr.h> 24~0U 25}; 26 27static unsigned signal_class[] = { 28#include <asm-generic/audit_signal.h> 29~0U 30}; 31 32int audit_classify_arch(int arch) 33{ 34 return 0; 35} 36 37int audit_classify_syscall(int abi, unsigned syscall) 38{ 39 switch(syscall) { 40 case __NR_open: 41 return AUDITSC_OPEN; 42 case __NR_openat: 43 return AUDITSC_OPENAT; 44 case __NR_execve: 45 return AUDITSC_EXECVE; 46 case __NR_openat2: 47 return AUDITSC_OPENAT2; 48 default: 49 return AUDITSC_NATIVE; 50 } 51} 52 53static int __init audit_classes_init(void) 54{ 55 audit_register_class(AUDIT_CLASS_WRITE, write_class); 56 audit_register_class(AUDIT_CLASS_READ, read_class); 57 audit_register_class(AUDIT_CLASS_DIR_WRITE, dir_class); 58 audit_register_class(AUDIT_CLASS_CHATTR, chattr_class); 59 audit_register_class(AUDIT_CLASS_SIGNAL, signal_class); 60 return 0; 61} 62 63__initcall(audit_classes_init);