projects / linux-2.6-block.git / blame
| Commit | Line | Data |
|---|---|---|
| fe7752ba DW |
1 | /* audit -- definition of audit_context structure and supporting types |
| 2 | * | |
| 3 | * Copyright 2003-2004 Red Hat, Inc. | |
| 4 | * Copyright 2005 Hewlett-Packard Development Company, L.P. | |
| 5 | * Copyright 2005 IBM Corporation | |
| 6 | * | |
| 7 | * This program is free software; you can redistribute it and/or modify | |
| 8 | * it under the terms of the GNU General Public License as published by | |
| 9 | * the Free Software Foundation; either version 2 of the License, or | |
| 10 | * (at your option) any later version. | |
| 11 | * | |
| 12 | * This program is distributed in the hope that it will be useful, | |
| 13 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 14 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
| 15 | * GNU General Public License for more details. | |
| 16 | * | |
| 17 | * You should have received a copy of the GNU General Public License | |
| 18 | * along with this program; if not, write to the Free Software | |
| 19 | * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA | |
| 20 | */ | |
| 21 | ||
| 22 | #include <linux/fs.h> | |
| 23 | #include <linux/audit.h> | |
| 24 | ||
| 25 | /* 0 = no checking | |
| 26 | 1 = put_count checking | |
| 27 | 2 = verbose put_count checking | |
| 28 | */ | |
| 29 | #define AUDIT_DEBUG 0 | |
| 30 | ||
| 31 | /* At task start time, the audit_state is set in the audit_context using | |
| 32 | a per-task filter. At syscall entry, the audit_state is augmented by | |
| 33 | the syscall filter. */ | |
| 34 | enum audit_state { | |
| 35 | AUDIT_DISABLED, /* Do not create per-task audit_context. | |
| 36 | * No syscall-specific audit records can | |
| 37 | * be generated. */ | |
| 38 | AUDIT_SETUP_CONTEXT, /* Create the per-task audit_context, | |
| 39 | * but don't necessarily fill it in at | |
| 40 | * syscall entry time (i.e., filter | |
| 41 | * instead). */ | |
| 42 | AUDIT_BUILD_CONTEXT, /* Create the per-task audit_context, | |
| 43 | * and always fill it in at syscall | |
| 44 | * entry time. This makes a full | |
| 45 | * syscall record available if some | |
| 46 | * other part of the kernel decides it | |
| 47 | * should be recorded. */ | |
| 48 | AUDIT_RECORD_CONTEXT /* Create the per-task audit_context, | |
| 49 | * always fill it in at syscall entry | |
| 50 | * time, and always write out the audit | |
| 51 | * record at syscall exit time. */ | |
| 52 | }; | |
| 53 | ||
| 54 | /* Rule lists */ | |
| 55 | struct audit_entry { | |
| 56 | struct list_head list; | |
| 57 | struct rcu_head rcu; | |
| 58 | struct audit_rule rule; | |
| 59 | }; | |
| 60 | ||
| 61 | ||
| 62 | extern int audit_pid; | |
| 63 | extern int audit_comparator(const u32 left, const u32 op, const u32 right); | |
| 64 | ||
| 65 | extern void audit_send_reply(int pid, int seq, int type, | |
| 66 | int done, int multi, | |
| 67 | void *payload, int size); | |
| 68 | extern void audit_log_lost(const char *message); | |
| 69 | extern void audit_panic(const char *message); | |
| 70 | extern struct semaphore audit_netlink_sem; |