| /security/ |
| D | lsm_audit.c | 187 static inline void print_ipv6_addr(struct audit_buffer *ab, in print_ipv6_addr() argument
192 audit_log_format(ab, " %s=%pI6c", name1, addr); in print_ipv6_addr()
194 audit_log_format(ab, " %s=%d", name2, ntohs(port)); in print_ipv6_addr()
197 static inline void print_ipv4_addr(struct audit_buffer *ab, __be32 addr, in print_ipv4_addr() argument
201 audit_log_format(ab, " %s=%pI4", name1, &addr); in print_ipv4_addr()
203 audit_log_format(ab, " %s=%d", name2, ntohs(port)); in print_ipv4_addr()
211 static void dump_common_audit_data(struct audit_buffer *ab, in dump_common_audit_data() argument
223 audit_log_format(ab, " pid=%d comm=", task_tgid_nr(current)); in dump_common_audit_data()
224 audit_log_untrustedstring(ab, tsk->comm); in dump_common_audit_data()
230 audit_log_format(ab, " key=%d ", a->u.ipc_id); in dump_common_audit_data()
[all …]
|
| /security/integrity/ima/ |
| D | ima_audit.c | 35 struct audit_buffer *ab; in integrity_audit_msg() local
40 ab = audit_log_start(current->audit_context, GFP_KERNEL, audit_msgno); in integrity_audit_msg()
41 audit_log_format(ab, "pid=%d uid=%u auid=%u ses=%u", in integrity_audit_msg()
46 audit_log_task_context(ab); in integrity_audit_msg()
47 audit_log_format(ab, " op="); in integrity_audit_msg()
48 audit_log_string(ab, op); in integrity_audit_msg()
49 audit_log_format(ab, " cause="); in integrity_audit_msg()
50 audit_log_string(ab, cause); in integrity_audit_msg()
51 audit_log_format(ab, " comm="); in integrity_audit_msg()
52 audit_log_untrustedstring(ab, current->comm); in integrity_audit_msg()
[all …]
|
| D | ima_policy.c | 405 static void ima_log_string(struct audit_buffer *ab, char *key, char *value) in ima_log_string() argument
407 audit_log_format(ab, "%s=", key); in ima_log_string()
408 audit_log_untrustedstring(ab, value); in ima_log_string()
409 audit_log_format(ab, " "); in ima_log_string()
414 struct audit_buffer *ab; in ima_parse_rule() local
418 ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_INTEGRITY_RULE); in ima_parse_rule()
435 ima_log_string(ab, "action", "measure"); in ima_parse_rule()
443 ima_log_string(ab, "action", "dont_measure"); in ima_parse_rule()
451 ima_log_string(ab, "action", "appraise"); in ima_parse_rule()
459 ima_log_string(ab, "action", "dont_appraise"); in ima_parse_rule()
[all …]
|
| D | ima_api.c | 214 struct audit_buffer *ab; in ima_audit_measurement() local
225 ab = audit_log_start(current->audit_context, GFP_KERNEL, in ima_audit_measurement()
227 if (!ab) in ima_audit_measurement()
230 audit_log_format(ab, "file="); in ima_audit_measurement()
231 audit_log_untrustedstring(ab, filename); in ima_audit_measurement()
232 audit_log_format(ab, " hash="); in ima_audit_measurement()
233 audit_log_untrustedstring(ab, hash); in ima_audit_measurement()
235 audit_log_task_info(ab, current); in ima_audit_measurement()
236 audit_log_end(ab); in ima_audit_measurement()
|
| /security/apparmor/ |
| D | audit.c | 111 static void audit_pre(struct audit_buffer *ab, void *ca) in audit_pre() argument
117 audit_log_format(ab, "apparmor="); in audit_pre()
118 audit_log_string(ab, aa_audit_type[sa->aad->type]); in audit_pre()
122 audit_log_format(ab, " operation="); in audit_pre()
123 audit_log_string(ab, op_table[sa->aad->op]); in audit_pre()
127 audit_log_format(ab, " info="); in audit_pre()
128 audit_log_string(ab, sa->aad->info); in audit_pre()
130 audit_log_format(ab, " error=%d", sa->aad->error); in audit_pre()
139 audit_log_format(ab, " parent=%d", pid); in audit_pre()
141 audit_log_format(ab, " namespace="); in audit_pre()
[all …]
|
| D | file.c | 30 static void audit_file_mask(struct audit_buffer *ab, u32 mask) in audit_file_mask() argument
57 audit_log_string(ab, str); in audit_file_mask()
65 static void file_audit_cb(struct audit_buffer *ab, void *va) in file_audit_cb() argument
71 audit_log_format(ab, " requested_mask="); in file_audit_cb()
72 audit_file_mask(ab, sa->aad->fs.request); in file_audit_cb()
75 audit_log_format(ab, " denied_mask="); in file_audit_cb()
76 audit_file_mask(ab, sa->aad->fs.denied); in file_audit_cb()
79 audit_log_format(ab, " fsuid=%d", in file_audit_cb()
81 audit_log_format(ab, " ouid=%d", in file_audit_cb()
86 audit_log_format(ab, " target="); in file_audit_cb()
[all …]
|
| D | ipc.c | 25 static void audit_cb(struct audit_buffer *ab, void *va) in audit_cb() argument
28 audit_log_format(ab, " target="); in audit_cb()
29 audit_log_untrustedstring(ab, sa->aad->target); in audit_cb()
|
| D | capability.c | 42 static void audit_cb(struct audit_buffer *ab, void *va) in audit_cb() argument
45 audit_log_format(ab, " capname="); in audit_cb()
46 audit_log_untrustedstring(ab, capability_names[sa->u.cap]); in audit_cb()
|
| D | resource.c | 32 static void audit_cb(struct audit_buffer *ab, void *va) in audit_cb() argument
36 audit_log_format(ab, " rlimit=%s value=%lu", in audit_cb()
|
| D | policy_unpack.c | 70 static void audit_cb(struct audit_buffer *ab, void *va) in audit_cb() argument
75 audit_log_format(ab, " name="); in audit_cb()
76 audit_log_untrustedstring(ab, name->base.hname); in audit_cb()
79 audit_log_format(ab, " offset=%ld", sa->aad->iface.pos); in audit_cb()
|
| /security/selinux/ |
| D | avc.c | 109 static void avc_dump_av(struct audit_buffer *ab, u16 tclass, u32 av) in avc_dump_av() argument
115 audit_log_format(ab, " null"); in avc_dump_av()
121 audit_log_format(ab, " {"); in avc_dump_av()
126 audit_log_format(ab, " %s", perms[i]); in avc_dump_av()
134 audit_log_format(ab, " 0x%x", av); in avc_dump_av()
136 audit_log_format(ab, " }"); in avc_dump_av()
145 static void avc_dump_query(struct audit_buffer *ab, u32 ssid, u32 tsid, u16 tclass) in avc_dump_query() argument
153 audit_log_format(ab, "ssid=%d", ssid); in avc_dump_query()
155 audit_log_format(ab, "scontext=%s", scontext); in avc_dump_query()
161 audit_log_format(ab, " tsid=%d", tsid); in avc_dump_query()
[all …]
|
| D | hooks.c | 2895 struct audit_buffer *ab; in selinux_inode_setxattr() local
2911 ab = audit_log_start(current->audit_context, GFP_ATOMIC, AUDIT_SELINUX_ERR); in selinux_inode_setxattr()
2912 audit_log_format(ab, "op=setxattr invalid_context="); in selinux_inode_setxattr()
2913 audit_log_n_untrustedstring(ab, value, audit_size); in selinux_inode_setxattr()
2914 audit_log_end(ab); in selinux_inode_setxattr()
5510 struct audit_buffer *ab; in selinux_setprocattr() local
5519 ab = audit_log_start(current->audit_context, GFP_ATOMIC, AUDIT_SELINUX_ERR); in selinux_setprocattr()
5520 audit_log_format(ab, "op=fscreate invalid_context="); in selinux_setprocattr()
5521 audit_log_n_untrustedstring(ab, value, audit_size); in selinux_setprocattr()
5522 audit_log_end(ab); in selinux_setprocattr()
|
| /security/smack/ |
| D | smack_access.c | 266 static void smack_log_callback(struct audit_buffer *ab, void *a) in smack_log_callback() argument
270 audit_log_format(ab, "lsm=SMACK fn=%s action=%s", in smack_log_callback()
273 audit_log_format(ab, " subject="); in smack_log_callback()
274 audit_log_untrustedstring(ab, sad->subject); in smack_log_callback()
275 audit_log_format(ab, " object="); in smack_log_callback()
276 audit_log_untrustedstring(ab, sad->object); in smack_log_callback()
277 audit_log_format(ab, " requested=%s", sad->request); in smack_log_callback()
|
| /security/selinux/ss/ |
| D | services.c | 469 struct audit_buffer *ab; in security_dump_masked_av() local
505 ab = audit_log_start(current->audit_context, in security_dump_masked_av()
507 if (!ab) in security_dump_masked_av()
510 audit_log_format(ab, "op=security_compute_av reason=%s " in security_dump_masked_av()
520 audit_log_format(ab, "%s%s", in security_dump_masked_av()
526 audit_log_end(ab); in security_dump_masked_av()
|