Lines Matching refs:ab
383 struct audit_buffer *ab; in audit_log_config_change() local
386 ab = audit_log_start(audit_context(), GFP_KERNEL, AUDIT_CONFIG_CHANGE); in audit_log_config_change()
387 if (unlikely(!ab)) in audit_log_config_change()
389 audit_log_format(ab, "op=set %s=%u old=%u ", function_name, new, old); in audit_log_config_change()
390 audit_log_session_info(ab); in audit_log_config_change()
391 rc = audit_log_task_context(ab); in audit_log_config_change()
394 audit_log_format(ab, " res=%d", allow_changes); in audit_log_config_change()
395 audit_log_end(ab); in audit_log_config_change()
1044 struct audit_buffer **ab, u16 msg_type) in audit_log_common_recv_msg() argument
1050 *ab = NULL; in audit_log_common_recv_msg()
1054 *ab = audit_log_start(context, GFP_KERNEL, msg_type); in audit_log_common_recv_msg()
1055 if (unlikely(!*ab)) in audit_log_common_recv_msg()
1057 audit_log_format(*ab, "pid=%d uid=%u ", pid, uid); in audit_log_common_recv_msg()
1058 audit_log_session_info(*ab); in audit_log_common_recv_msg()
1059 audit_log_task_context(*ab); in audit_log_common_recv_msg()
1062 static inline void audit_log_user_recv_msg(struct audit_buffer **ab, in audit_log_user_recv_msg() argument
1065 audit_log_common_recv_msg(NULL, ab, msg_type); in audit_log_user_recv_msg()
1088 struct audit_buffer *ab; in audit_log_feature_change() local
1093 ab = audit_log_start(audit_context(), GFP_KERNEL, AUDIT_FEATURE_CHANGE); in audit_log_feature_change()
1094 if (!ab) in audit_log_feature_change()
1096 audit_log_task_info(ab); in audit_log_feature_change()
1097 audit_log_format(ab, " feature=%s old=%u new=%u old_lock=%u new_lock=%u res=%d", in audit_log_feature_change()
1100 audit_log_end(ab); in audit_log_feature_change()
1178 struct audit_buffer *ab; in audit_receive_msg() local
1335 audit_log_user_recv_msg(&ab, msg_type); in audit_receive_msg()
1337 audit_log_format(ab, " msg='%.*s'", in audit_receive_msg()
1343 audit_log_format(ab, " data="); in audit_receive_msg()
1348 audit_log_n_untrustedstring(ab, data, size); in audit_receive_msg()
1350 audit_log_end(ab); in audit_receive_msg()
1358 audit_log_common_recv_msg(audit_context(), &ab, in audit_receive_msg()
1360 audit_log_format(ab, " op=%s audit_enabled=%d res=0", in audit_receive_msg()
1364 audit_log_end(ab); in audit_receive_msg()
1374 audit_log_common_recv_msg(audit_context(), &ab, in audit_receive_msg()
1376 audit_log_format(ab, " op=trim res=1"); in audit_receive_msg()
1377 audit_log_end(ab); in audit_receive_msg()
1405 audit_log_common_recv_msg(audit_context(), &ab, in audit_receive_msg()
1407 audit_log_format(ab, " op=make_equiv old="); in audit_receive_msg()
1408 audit_log_untrustedstring(ab, old); in audit_receive_msg()
1409 audit_log_format(ab, " new="); in audit_receive_msg()
1410 audit_log_untrustedstring(ab, new); in audit_receive_msg()
1411 audit_log_format(ab, " res=%d", !err); in audit_receive_msg()
1412 audit_log_end(ab); in audit_receive_msg()
1453 struct audit_buffer *ab; in audit_receive_msg() local
1473 audit_log_common_recv_msg(audit_context(), &ab, in audit_receive_msg()
1475 audit_log_format(ab, " op=tty_set old-enabled=%d new-enabled=%d" in audit_receive_msg()
1479 audit_log_end(ab); in audit_receive_msg()
1662 static void audit_buffer_free(struct audit_buffer *ab) in audit_buffer_free() argument
1664 if (!ab) in audit_buffer_free()
1667 kfree_skb(ab->skb); in audit_buffer_free()
1668 kmem_cache_free(audit_buffer_cache, ab); in audit_buffer_free()
1674 struct audit_buffer *ab; in audit_buffer_alloc() local
1676 ab = kmem_cache_alloc(audit_buffer_cache, gfp_mask); in audit_buffer_alloc()
1677 if (!ab) in audit_buffer_alloc()
1680 ab->skb = nlmsg_new(AUDIT_BUFSIZ, gfp_mask); in audit_buffer_alloc()
1681 if (!ab->skb) in audit_buffer_alloc()
1683 if (!nlmsg_put(ab->skb, 0, 0, type, 0, 0)) in audit_buffer_alloc()
1686 ab->ctx = ctx; in audit_buffer_alloc()
1687 ab->gfp_mask = gfp_mask; in audit_buffer_alloc()
1689 return ab; in audit_buffer_alloc()
1692 audit_buffer_free(ab); in audit_buffer_alloc()
1747 struct audit_buffer *ab; in audit_log_start() local
1793 ab = audit_buffer_alloc(ctx, gfp_mask, type); in audit_log_start()
1794 if (!ab) { in audit_log_start()
1799 audit_get_stamp(ab->ctx, &t, &serial); in audit_log_start()
1800 audit_log_format(ab, "audit(%llu.%03lu:%u): ", in audit_log_start()
1803 return ab; in audit_log_start()
1814 static inline int audit_expand(struct audit_buffer *ab, int extra) in audit_expand() argument
1816 struct sk_buff *skb = ab->skb; in audit_expand()
1818 int ret = pskb_expand_head(skb, 0, extra, ab->gfp_mask); in audit_expand()
1836 static void audit_log_vformat(struct audit_buffer *ab, const char *fmt, in audit_log_vformat() argument
1843 if (!ab) in audit_log_vformat()
1846 BUG_ON(!ab->skb); in audit_log_vformat()
1847 skb = ab->skb; in audit_log_vformat()
1850 avail = audit_expand(ab, AUDIT_BUFSIZ); in audit_log_vformat()
1860 avail = audit_expand(ab, in audit_log_vformat()
1882 void audit_log_format(struct audit_buffer *ab, const char *fmt, ...) in audit_log_format() argument
1886 if (!ab) in audit_log_format()
1889 audit_log_vformat(ab, fmt, args); in audit_log_format()
1904 void audit_log_n_hex(struct audit_buffer *ab, const unsigned char *buf, in audit_log_n_hex() argument
1911 if (!ab) in audit_log_n_hex()
1914 BUG_ON(!ab->skb); in audit_log_n_hex()
1915 skb = ab->skb; in audit_log_n_hex()
1921 avail = audit_expand(ab, new_len); in audit_log_n_hex()
1937 void audit_log_n_string(struct audit_buffer *ab, const char *string, in audit_log_n_string() argument
1944 if (!ab) in audit_log_n_string()
1947 BUG_ON(!ab->skb); in audit_log_n_string()
1948 skb = ab->skb; in audit_log_n_string()
1952 avail = audit_expand(ab, new_len); in audit_log_n_string()
1994 void audit_log_n_untrustedstring(struct audit_buffer *ab, const char *string, in audit_log_n_untrustedstring() argument
1998 audit_log_n_hex(ab, string, len); in audit_log_n_untrustedstring()
2000 audit_log_n_string(ab, string, len); in audit_log_n_untrustedstring()
2011 void audit_log_untrustedstring(struct audit_buffer *ab, const char *string) in audit_log_untrustedstring() argument
2013 audit_log_n_untrustedstring(ab, string, strlen(string)); in audit_log_untrustedstring()
2017 void audit_log_d_path(struct audit_buffer *ab, const char *prefix, in audit_log_d_path() argument
2023 audit_log_format(ab, "%s", prefix); in audit_log_d_path()
2026 pathname = kmalloc(PATH_MAX+11, ab->gfp_mask); in audit_log_d_path()
2028 audit_log_string(ab, "<no_memory>"); in audit_log_d_path()
2034 audit_log_string(ab, "<too_long>"); in audit_log_d_path()
2036 audit_log_untrustedstring(ab, p); in audit_log_d_path()
2040 void audit_log_session_info(struct audit_buffer *ab) in audit_log_session_info() argument
2045 audit_log_format(ab, "auid=%u ses=%u", auid, sessionid); in audit_log_session_info()
2048 void audit_log_key(struct audit_buffer *ab, char *key) in audit_log_key() argument
2050 audit_log_format(ab, " key="); in audit_log_key()
2052 audit_log_untrustedstring(ab, key); in audit_log_key()
2054 audit_log_format(ab, "(null)"); in audit_log_key()
2057 int audit_log_task_context(struct audit_buffer *ab) in audit_log_task_context() argument
2075 audit_log_format(ab, " subj=%s", ctx); in audit_log_task_context()
2085 void audit_log_d_path_exe(struct audit_buffer *ab, in audit_log_d_path_exe() argument
2097 audit_log_d_path(ab, " exe=", &exe_file->f_path); in audit_log_d_path_exe()
2101 audit_log_format(ab, " exe=(null)"); in audit_log_d_path_exe()
2121 void audit_log_task_info(struct audit_buffer *ab) in audit_log_task_info() argument
2127 if (!ab) in audit_log_task_info()
2132 audit_log_format(ab, in audit_log_task_info()
2150 audit_log_format(ab, " comm="); in audit_log_task_info()
2151 audit_log_untrustedstring(ab, get_task_comm(comm, current)); in audit_log_task_info()
2152 audit_log_d_path_exe(ab, current->mm); in audit_log_task_info()
2153 audit_log_task_context(ab); in audit_log_task_info()
2163 struct audit_buffer *ab; in audit_log_link_denied() local
2169 ab = audit_log_start(audit_context(), GFP_KERNEL, AUDIT_ANOM_LINK); in audit_log_link_denied()
2170 if (!ab) in audit_log_link_denied()
2172 audit_log_format(ab, "op=%s", operation); in audit_log_link_denied()
2173 audit_log_task_info(ab); in audit_log_link_denied()
2174 audit_log_format(ab, " res=0"); in audit_log_link_denied()
2175 audit_log_end(ab); in audit_log_link_denied()
2203 struct audit_buffer *ab; in audit_log_set_loginuid() local
2210 ab = audit_log_start(audit_context(), GFP_KERNEL, AUDIT_LOGIN); in audit_log_set_loginuid()
2211 if (!ab) in audit_log_set_loginuid()
2219 audit_log_format(ab, "pid=%d uid=%u", task_tgid_nr(current), uid); in audit_log_set_loginuid()
2220 audit_log_task_context(ab); in audit_log_set_loginuid()
2221 audit_log_format(ab, " old-auid=%u auid=%u tty=%s old-ses=%u ses=%u res=%d", in audit_log_set_loginuid()
2225 audit_log_end(ab); in audit_log_set_loginuid()
2299 void audit_log_end(struct audit_buffer *ab) in audit_log_end() argument
2304 if (!ab) in audit_log_end()
2308 skb = ab->skb; in audit_log_end()
2309 ab->skb = NULL; in audit_log_end()
2322 audit_buffer_free(ab); in audit_log_end()
2340 struct audit_buffer *ab; in audit_log() local
2343 ab = audit_log_start(ctx, gfp_mask, type); in audit_log()
2344 if (ab) { in audit_log()
2346 audit_log_vformat(ab, fmt, args); in audit_log()
2348 audit_log_end(ab); in audit_log()