mirror of
https://git.proxmox.com/git/mirror_ubuntu-kernels.git
synced 2025-08-25 19:07:55 +00:00
85ff537962
Create a new audit record type to contain the subject information when there are multiple security modules that require such data. This record is linked with the same timestamp and serial number. The record is produced only in cases where there is more than one security module with a process "context". Before this change the only audit events that required multiple records were syscall events. Several non-syscall events include subject contexts, so the use of audit_context data has been expanded as necessary. Signed-off-by: Casey Schaufler <casey@schaufler-ca.com> Cc: linux-audit@redhat.com Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Andrea Righi <andrea.righi@canonical.com> Signed-off-by: Seth Forshee <seth.forshee@canonical.com>
50 lines
1.2 KiB
C
50 lines
1.2 KiB
C
/* SPDX-License-Identifier: GPL-2.0-or-later */
|
|
/*
|
|
* NetLabel NETLINK Interface
|
|
*
|
|
* This file defines the NETLINK interface for the NetLabel system. The
|
|
* NetLabel system manages static and dynamic label mappings for network
|
|
* protocols such as CIPSO and RIPSO.
|
|
*
|
|
* Author: Paul Moore <paul@paul-moore.com>
|
|
*/
|
|
|
|
/*
|
|
* (c) Copyright Hewlett-Packard Development Company, L.P., 2006
|
|
*/
|
|
|
|
#ifndef _NETLABEL_USER_H
|
|
#define _NETLABEL_USER_H
|
|
|
|
#include <linux/types.h>
|
|
#include <linux/skbuff.h>
|
|
#include <linux/capability.h>
|
|
#include <linux/audit.h>
|
|
#include <net/netlink.h>
|
|
#include <net/genetlink.h>
|
|
#include <net/netlabel.h>
|
|
|
|
/* NetLabel NETLINK helper functions */
|
|
|
|
/**
|
|
* netlbl_netlink_auditinfo - Fetch the audit information from a NETLINK msg
|
|
* @audit_info: NetLabel audit information
|
|
*/
|
|
static inline void netlbl_netlink_auditinfo(struct netlbl_audit *audit_info)
|
|
{
|
|
security_task_getsecid_subj(current, &audit_info->lsmdata);
|
|
audit_info->loginuid = audit_get_loginuid(current);
|
|
audit_info->sessionid = audit_get_sessionid(current);
|
|
}
|
|
|
|
/* NetLabel NETLINK I/O functions */
|
|
|
|
int netlbl_netlink_init(void);
|
|
|
|
/* NetLabel Audit Functions */
|
|
|
|
struct audit_buffer *netlbl_audit_start_common(int type,
|
|
struct netlbl_audit *audit_info);
|
|
|
|
#endif
|