blob: b26d7f121ac517620c15b5e97a2a5f92278fdb94 [file] [log] [blame]
85c87212005-04-29 16:23:29 +01001/* audit.h -- Auditing support
Linus Torvalds1da177e2005-04-16 15:20:36 -07002 *
3 * Copyright 2003-2004 Red Hat Inc., Durham, North Carolina.
4 * All Rights Reserved.
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
10 *
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
15 *
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, write to the Free Software
18 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
19 *
20 * Written by Rickard E. (Rik) Faith <faith@redhat.com>
21 *
22 */
Linus Torvalds1da177e2005-04-16 15:20:36 -070023#ifndef _LINUX_AUDIT_H_
24#define _LINUX_AUDIT_H_
25
David Woodhousef001e472006-04-27 00:11:01 +010026#include <linux/sched.h>
Mike Frysingerc0a3a202013-01-11 14:32:13 -080027#include <linux/ptrace.h>
David Howells607ca462012-10-13 10:46:48 +010028#include <uapi/linux/audit.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070029
Steve Grubbc2f0c7c2005-05-06 12:38:39 +010030struct audit_sig_info {
31 uid_t uid;
32 pid_t pid;
Al Viroe1396062006-05-25 10:19:47 -040033 char ctx[0];
Steve Grubbc2f0c7c2005-05-06 12:38:39 +010034};
35
Linus Torvalds1da177e2005-04-16 15:20:36 -070036struct audit_buffer;
37struct audit_context;
38struct inode;
David Woodhouse5bb289b2005-06-24 14:14:05 +010039struct netlink_skb_parms;
Alexey Dobriyan37721e12011-01-10 08:17:10 +020040struct path;
Al Viro473ae302006-04-26 14:04:08 -040041struct linux_binprm;
George C. Wilson20ca73b2006-05-24 16:09:55 -050042struct mq_attr;
43struct mqstat;
Ahmed S. Darwish9d57a7f2008-03-01 22:03:14 +020044struct audit_watch;
45struct audit_tree;
46
47struct audit_krule {
48 int vers_ops;
49 u32 flags;
50 u32 listnr;
51 u32 action;
52 u32 mask[AUDIT_BITMASK_SIZE];
53 u32 buflen; /* for data alloc on list rules */
54 u32 field_count;
55 char *filterkey; /* ties events to rules */
56 struct audit_field *fields;
57 struct audit_field *arch_f; /* quick access to arch field */
58 struct audit_field *inode_f; /* quick access to an inode field */
59 struct audit_watch *watch; /* associated watch */
60 struct audit_tree *tree; /* associated watched tree */
61 struct list_head rlist; /* entry in audit_{watch,tree}.rules list */
Al Viroe45aa212008-12-15 01:17:50 -050062 struct list_head list; /* for AUDIT_LIST* purposes only */
Al Viro0590b932008-12-14 23:45:27 -050063 u64 prio;
Ahmed S. Darwish9d57a7f2008-03-01 22:03:14 +020064};
65
66struct audit_field {
67 u32 type;
68 u32 val;
Eric W. Biedermanca57ec02012-09-11 02:18:08 -070069 kuid_t uid;
70 kgid_t gid;
Ahmed S. Darwish9d57a7f2008-03-01 22:03:14 +020071 u32 op;
Ahmed S. Darwish04305e42008-04-19 09:59:43 +100072 char *lsm_str;
73 void *lsm_rule;
Ahmed S. Darwish9d57a7f2008-03-01 22:03:14 +020074};
Linus Torvalds1da177e2005-04-16 15:20:36 -070075
Al Virob9155432006-07-01 03:56:16 -040076extern int __init audit_register_class(int class, unsigned *list);
Al Viro55669bf2006-08-31 19:26:40 -040077extern int audit_classify_syscall(int abi, unsigned syscall);
Amy Griffise54dc242007-03-29 18:01:04 -040078extern int audit_classify_arch(int arch);
Jeff Layton78e2e802012-10-10 15:25:22 -040079
80/* audit_names->type values */
81#define AUDIT_TYPE_UNKNOWN 0 /* we don't know yet */
82#define AUDIT_TYPE_NORMAL 1 /* a "normal" audit record */
Jeff Laytonbfcec702012-10-10 15:25:23 -040083#define AUDIT_TYPE_PARENT 2 /* a parent audit record */
Jeff Layton4fa6b5e2012-10-10 15:25:25 -040084#define AUDIT_TYPE_CHILD_DELETE 3 /* a child being deleted */
85#define AUDIT_TYPE_CHILD_CREATE 4 /* a child being created */
Jeff Layton78e2e802012-10-10 15:25:22 -040086
Chen Gang2950fa92013-04-07 16:55:23 +080087/* maximized args number that audit_socketcall can process */
88#define AUDITSC_ARGS 6
89
Jeff Layton91a27b22012-10-10 15:25:28 -040090struct filename;
91
Linus Torvalds1da177e2005-04-16 15:20:36 -070092#ifdef CONFIG_AUDITSYSCALL
93/* These are defined in auditsc.c */
94 /* Public API */
95extern int audit_alloc(struct task_struct *task);
Eric Parisa4ff8db2012-01-03 14:23:07 -050096extern void __audit_free(struct task_struct *task);
Eric Parisb05d8442012-01-03 14:23:06 -050097extern void __audit_syscall_entry(int arch,
98 int major, unsigned long a0, unsigned long a1,
99 unsigned long a2, unsigned long a3);
Eric Parisd7e75282012-01-03 14:23:06 -0500100extern void __audit_syscall_exit(int ret_success, long ret_value);
Jeff Layton7ac86262012-10-10 15:25:28 -0400101extern struct filename *__audit_reusename(const __user char *uptr);
Jeff Layton91a27b22012-10-10 15:25:28 -0400102extern void __audit_getname(struct filename *name);
103extern void audit_putname(struct filename *name);
Jeff Laytonadb5c242012-10-10 16:43:13 -0400104extern void __audit_inode(struct filename *name, const struct dentry *dentry,
Jeff Laytonbfcec702012-10-10 15:25:23 -0400105 unsigned int parent);
Jeff Laytonc43a25a2012-10-10 15:25:21 -0400106extern void __audit_inode_child(const struct inode *parent,
Jeff Layton4fa6b5e2012-10-10 15:25:25 -0400107 const struct dentry *dentry,
108 const unsigned char type);
Kees Cook3dc1c1b2012-04-12 16:47:58 -0500109extern void __audit_seccomp(unsigned long syscall, long signr, int code);
Al Viroa5cb0132007-03-20 13:58:35 -0400110extern void __audit_ptrace(struct task_struct *t);
111
Al Virod51374a2006-08-03 10:59:26 -0400112static inline int audit_dummy_context(void)
113{
114 void *p = current->audit_context;
115 return !p || *(int *)p;
116}
Eric Parisa4ff8db2012-01-03 14:23:07 -0500117static inline void audit_free(struct task_struct *task)
118{
119 if (unlikely(task->audit_context))
120 __audit_free(task);
121}
Eric Parisb05d8442012-01-03 14:23:06 -0500122static inline void audit_syscall_entry(int arch, int major, unsigned long a0,
123 unsigned long a1, unsigned long a2,
124 unsigned long a3)
125{
Anton Blanchardcdee3902013-01-09 10:46:17 +1100126 if (unlikely(current->audit_context))
Eric Parisb05d8442012-01-03 14:23:06 -0500127 __audit_syscall_entry(arch, major, a0, a1, a2, a3);
128}
Eric Parisd7e75282012-01-03 14:23:06 -0500129static inline void audit_syscall_exit(void *pt_regs)
130{
131 if (unlikely(current->audit_context)) {
132 int success = is_syscall_success(pt_regs);
133 int return_code = regs_return_value(pt_regs);
134
135 __audit_syscall_exit(success, return_code);
136 }
137}
Jeff Layton7ac86262012-10-10 15:25:28 -0400138static inline struct filename *audit_reusename(const __user char *name)
139{
140 if (unlikely(!audit_dummy_context()))
141 return __audit_reusename(name);
142 return NULL;
143}
Jeff Layton91a27b22012-10-10 15:25:28 -0400144static inline void audit_getname(struct filename *name)
Al Virod8945bb52006-05-18 16:01:30 -0400145{
Al Viro5ac3a9c2006-07-16 06:38:45 -0400146 if (unlikely(!audit_dummy_context()))
Al Virod8945bb52006-05-18 16:01:30 -0400147 __audit_getname(name);
148}
Jeff Laytonadb5c242012-10-10 16:43:13 -0400149static inline void audit_inode(struct filename *name, const struct dentry *dentry,
Jeff Laytonbfcec702012-10-10 15:25:23 -0400150 unsigned int parent) {
Al Viro5ac3a9c2006-07-16 06:38:45 -0400151 if (unlikely(!audit_dummy_context()))
Jeff Laytonbfcec702012-10-10 15:25:23 -0400152 __audit_inode(name, dentry, parent);
Amy Griffis73241cc2005-11-03 16:00:25 +0000153}
Jeff Laytonc43a25a2012-10-10 15:25:21 -0400154static inline void audit_inode_child(const struct inode *parent,
Jeff Layton4fa6b5e2012-10-10 15:25:25 -0400155 const struct dentry *dentry,
156 const unsigned char type) {
Al Viro5ac3a9c2006-07-16 06:38:45 -0400157 if (unlikely(!audit_dummy_context()))
Jeff Layton4fa6b5e2012-10-10 15:25:25 -0400158 __audit_inode_child(parent, dentry, type);
Amy Griffis73241cc2005-11-03 16:00:25 +0000159}
Steve Grubb0a4ff8c2007-04-19 10:28:21 -0400160void audit_core_dumps(long signr);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700161
Kees Cook3dc1c1b2012-04-12 16:47:58 -0500162static inline void audit_seccomp(unsigned long syscall, long signr, int code)
Eric Paris85e7bac2012-01-03 14:23:05 -0500163{
Kees Cook7b9205b2013-01-11 14:32:05 -0800164 /* Force a record to be reported if a signal was delivered. */
165 if (signr || unlikely(!audit_dummy_context()))
Kees Cook3dc1c1b2012-04-12 16:47:58 -0500166 __audit_seccomp(syscall, signr, code);
Eric Paris85e7bac2012-01-03 14:23:05 -0500167}
168
Al Viroa5cb0132007-03-20 13:58:35 -0400169static inline void audit_ptrace(struct task_struct *t)
170{
171 if (unlikely(!audit_dummy_context()))
172 __audit_ptrace(t);
173}
174
Linus Torvalds1da177e2005-04-16 15:20:36 -0700175 /* Private API (for audit.c only) */
David Woodhousebfb44962005-05-21 21:08:09 +0100176extern unsigned int audit_serial(void);
Al Viro48887e62008-12-06 01:05:50 -0500177extern int auditsc_get_stamp(struct audit_context *ctx,
David Woodhousebfb44962005-05-21 21:08:09 +0100178 struct timespec *t, unsigned int *serial);
Kees Cook9321d522012-10-04 17:11:11 -0700179extern int audit_set_loginuid(kuid_t loginuid);
180
181static inline kuid_t audit_get_loginuid(struct task_struct *tsk)
182{
183 return tsk->loginuid;
184}
185
186static inline int audit_get_sessionid(struct task_struct *tsk)
187{
188 return tsk->sessionid;
189}
190
Joy Latten161a09e2006-11-27 13:11:54 -0600191extern void audit_log_task_context(struct audit_buffer *ab);
Peter Moodye23eb922012-06-14 10:04:35 -0700192extern void audit_log_task_info(struct audit_buffer *ab, struct task_struct *tsk);
Al Viroa33e6752008-12-10 03:40:06 -0500193extern void __audit_ipc_obj(struct kern_ipc_perm *ipcp);
Al Viro2570ebb2011-07-27 14:03:22 -0400194extern void __audit_ipc_set_perm(unsigned long qbytes, uid_t uid, gid_t gid, umode_t mode);
Eric Paris07c49412012-01-03 14:23:07 -0500195extern int __audit_bprm(struct linux_binprm *bprm);
Chen Gang2950fa92013-04-07 16:55:23 +0800196extern int __audit_socketcall(int nargs, unsigned long *args);
Eric Paris07c49412012-01-03 14:23:07 -0500197extern int __audit_sockaddr(int len, void *addr);
Al Viro157cf642008-12-14 04:57:47 -0500198extern void __audit_fd_pair(int fd1, int fd2);
Al Virodf0a4282011-07-26 05:26:10 -0400199extern void __audit_mq_open(int oflag, umode_t mode, struct mq_attr *attr);
Al Viroc32c8af2008-12-14 03:46:48 -0500200extern void __audit_mq_sendrecv(mqd_t mqdes, size_t msg_len, unsigned int msg_prio, const struct timespec *abs_timeout);
Al Viro20114f72008-12-10 07:16:12 -0500201extern void __audit_mq_notify(mqd_t mqdes, const struct sigevent *notification);
Al Viro73929062008-12-10 06:58:59 -0500202extern void __audit_mq_getsetattr(mqd_t mqdes, struct mq_attr *mqstat);
David Howellsd84f4f92008-11-14 10:39:23 +1100203extern int __audit_log_bprm_fcaps(struct linux_binprm *bprm,
204 const struct cred *new,
205 const struct cred *old);
Al Viro57f71a02009-01-04 14:52:57 -0500206extern void __audit_log_capset(pid_t pid, const struct cred *new, const struct cred *old);
Al Viro120a7952010-10-30 02:54:44 -0400207extern void __audit_mmap_fd(int fd, int flags);
Al Virod8945bb52006-05-18 16:01:30 -0400208
Al Viroa33e6752008-12-10 03:40:06 -0500209static inline void audit_ipc_obj(struct kern_ipc_perm *ipcp)
Al Virod8945bb52006-05-18 16:01:30 -0400210{
Al Viro5ac3a9c2006-07-16 06:38:45 -0400211 if (unlikely(!audit_dummy_context()))
Al Viroa33e6752008-12-10 03:40:06 -0500212 __audit_ipc_obj(ipcp);
Al Virod8945bb52006-05-18 16:01:30 -0400213}
Al Viro157cf642008-12-14 04:57:47 -0500214static inline void audit_fd_pair(int fd1, int fd2)
Al Virodb349502007-02-07 01:48:00 -0500215{
216 if (unlikely(!audit_dummy_context()))
Al Viro157cf642008-12-14 04:57:47 -0500217 __audit_fd_pair(fd1, fd2);
Al Virodb349502007-02-07 01:48:00 -0500218}
Al Viro2570ebb2011-07-27 14:03:22 -0400219static inline void audit_ipc_set_perm(unsigned long qbytes, uid_t uid, gid_t gid, umode_t mode)
Al Virod8945bb52006-05-18 16:01:30 -0400220{
Al Viro5ac3a9c2006-07-16 06:38:45 -0400221 if (unlikely(!audit_dummy_context()))
Al Viroe816f372008-12-10 03:47:15 -0500222 __audit_ipc_set_perm(qbytes, uid, gid, mode);
Al Virod8945bb52006-05-18 16:01:30 -0400223}
Eric Paris07c49412012-01-03 14:23:07 -0500224static inline int audit_bprm(struct linux_binprm *bprm)
225{
226 if (unlikely(!audit_dummy_context()))
227 return __audit_bprm(bprm);
228 return 0;
229}
Chen Gang2950fa92013-04-07 16:55:23 +0800230static inline int audit_socketcall(int nargs, unsigned long *args)
Eric Paris07c49412012-01-03 14:23:07 -0500231{
232 if (unlikely(!audit_dummy_context()))
Chen Gang2950fa92013-04-07 16:55:23 +0800233 return __audit_socketcall(nargs, args);
234 return 0;
Eric Paris07c49412012-01-03 14:23:07 -0500235}
236static inline int audit_sockaddr(int len, void *addr)
237{
238 if (unlikely(!audit_dummy_context()))
239 return __audit_sockaddr(len, addr);
240 return 0;
241}
Al Virodf0a4282011-07-26 05:26:10 -0400242static inline void audit_mq_open(int oflag, umode_t mode, struct mq_attr *attr)
George C. Wilson20ca73b2006-05-24 16:09:55 -0500243{
Al Viro5ac3a9c2006-07-16 06:38:45 -0400244 if (unlikely(!audit_dummy_context()))
Al Viro564f6992008-12-14 04:02:26 -0500245 __audit_mq_open(oflag, mode, attr);
George C. Wilson20ca73b2006-05-24 16:09:55 -0500246}
Al Viroc32c8af2008-12-14 03:46:48 -0500247static inline void audit_mq_sendrecv(mqd_t mqdes, size_t msg_len, unsigned int msg_prio, const struct timespec *abs_timeout)
George C. Wilson20ca73b2006-05-24 16:09:55 -0500248{
Al Viro5ac3a9c2006-07-16 06:38:45 -0400249 if (unlikely(!audit_dummy_context()))
Al Viroc32c8af2008-12-14 03:46:48 -0500250 __audit_mq_sendrecv(mqdes, msg_len, msg_prio, abs_timeout);
George C. Wilson20ca73b2006-05-24 16:09:55 -0500251}
Al Viro20114f72008-12-10 07:16:12 -0500252static inline void audit_mq_notify(mqd_t mqdes, const struct sigevent *notification)
George C. Wilson20ca73b2006-05-24 16:09:55 -0500253{
Al Viro5ac3a9c2006-07-16 06:38:45 -0400254 if (unlikely(!audit_dummy_context()))
Al Viro20114f72008-12-10 07:16:12 -0500255 __audit_mq_notify(mqdes, notification);
George C. Wilson20ca73b2006-05-24 16:09:55 -0500256}
Al Viro73929062008-12-10 06:58:59 -0500257static inline void audit_mq_getsetattr(mqd_t mqdes, struct mq_attr *mqstat)
George C. Wilson20ca73b2006-05-24 16:09:55 -0500258{
Al Viro5ac3a9c2006-07-16 06:38:45 -0400259 if (unlikely(!audit_dummy_context()))
Al Viro73929062008-12-10 06:58:59 -0500260 __audit_mq_getsetattr(mqdes, mqstat);
George C. Wilson20ca73b2006-05-24 16:09:55 -0500261}
Eric Paris3fc689e2008-11-11 21:48:18 +1100262
David Howellsd84f4f92008-11-14 10:39:23 +1100263static inline int audit_log_bprm_fcaps(struct linux_binprm *bprm,
264 const struct cred *new,
265 const struct cred *old)
Eric Paris3fc689e2008-11-11 21:48:18 +1100266{
267 if (unlikely(!audit_dummy_context()))
David Howellsd84f4f92008-11-14 10:39:23 +1100268 return __audit_log_bprm_fcaps(bprm, new, old);
269 return 0;
Eric Paris3fc689e2008-11-11 21:48:18 +1100270}
271
Al Viro57f71a02009-01-04 14:52:57 -0500272static inline void audit_log_capset(pid_t pid, const struct cred *new,
David Howellsd84f4f92008-11-14 10:39:23 +1100273 const struct cred *old)
Eric Parise68b75a02008-11-11 21:48:22 +1100274{
275 if (unlikely(!audit_dummy_context()))
Al Viro57f71a02009-01-04 14:52:57 -0500276 __audit_log_capset(pid, new, old);
Eric Parise68b75a02008-11-11 21:48:22 +1100277}
278
Al Viro120a7952010-10-30 02:54:44 -0400279static inline void audit_mmap_fd(int fd, int flags)
280{
281 if (unlikely(!audit_dummy_context()))
282 __audit_mmap_fd(fd, flags);
283}
284
Al Viro471a5c72006-07-10 08:29:24 -0400285extern int audit_n_rules;
Amy Griffise54dc242007-03-29 18:01:04 -0400286extern int audit_signals;
Eric Parisd7e75282012-01-03 14:23:06 -0500287#else /* CONFIG_AUDITSYSCALL */
Kees Cook9321d522012-10-04 17:11:11 -0700288static inline int audit_alloc(struct task_struct *task)
289{
290 return 0;
291}
292static inline void audit_free(struct task_struct *task)
293{ }
294static inline void audit_syscall_entry(int arch, int major, unsigned long a0,
295 unsigned long a1, unsigned long a2,
296 unsigned long a3)
297{ }
298static inline void audit_syscall_exit(void *pt_regs)
299{ }
300static inline int audit_dummy_context(void)
301{
302 return 1;
303}
Jeff Layton7ac86262012-10-10 15:25:28 -0400304static inline struct filename *audit_reusename(const __user char *name)
305{
306 return NULL;
307}
Jeff Layton91a27b22012-10-10 15:25:28 -0400308static inline void audit_getname(struct filename *name)
Kees Cook9321d522012-10-04 17:11:11 -0700309{ }
Jeff Layton91a27b22012-10-10 15:25:28 -0400310static inline void audit_putname(struct filename *name)
Kees Cook9321d522012-10-04 17:11:11 -0700311{ }
Jeff Laytonadb5c242012-10-10 16:43:13 -0400312static inline void __audit_inode(struct filename *name,
313 const struct dentry *dentry,
Jeff Laytonbfcec702012-10-10 15:25:23 -0400314 unsigned int parent)
Kees Cook9321d522012-10-04 17:11:11 -0700315{ }
Jeff Laytonc43a25a2012-10-10 15:25:21 -0400316static inline void __audit_inode_child(const struct inode *parent,
Jeff Layton4fa6b5e2012-10-10 15:25:25 -0400317 const struct dentry *dentry,
318 const unsigned char type)
Kees Cook9321d522012-10-04 17:11:11 -0700319{ }
Jeff Laytonadb5c242012-10-10 16:43:13 -0400320static inline void audit_inode(struct filename *name,
321 const struct dentry *dentry,
Jeff Laytonbfcec702012-10-10 15:25:23 -0400322 unsigned int parent)
Kees Cook9321d522012-10-04 17:11:11 -0700323{ }
Jeff Laytonc43a25a2012-10-10 15:25:21 -0400324static inline void audit_inode_child(const struct inode *parent,
Jeff Layton4fa6b5e2012-10-10 15:25:25 -0400325 const struct dentry *dentry,
326 const unsigned char type)
Kees Cook9321d522012-10-04 17:11:11 -0700327{ }
328static inline void audit_core_dumps(long signr)
329{ }
330static inline void __audit_seccomp(unsigned long syscall, long signr, int code)
331{ }
332static inline void audit_seccomp(unsigned long syscall, long signr, int code)
333{ }
334static inline int auditsc_get_stamp(struct audit_context *ctx,
335 struct timespec *t, unsigned int *serial)
336{
337 return 0;
338}
339static inline kuid_t audit_get_loginuid(struct task_struct *tsk)
340{
341 return INVALID_UID;
342}
343static inline int audit_get_sessionid(struct task_struct *tsk)
344{
345 return -1;
346}
347static inline void audit_log_task_context(struct audit_buffer *ab)
348{ }
349static inline void audit_log_task_info(struct audit_buffer *ab,
350 struct task_struct *tsk)
351{ }
352static inline void audit_ipc_obj(struct kern_ipc_perm *ipcp)
353{ }
354static inline void audit_ipc_set_perm(unsigned long qbytes, uid_t uid,
355 gid_t gid, umode_t mode)
356{ }
357static inline int audit_bprm(struct linux_binprm *bprm)
358{
359 return 0;
360}
Chen Gang2950fa92013-04-07 16:55:23 +0800361static inline int audit_socketcall(int nargs, unsigned long *args)
362{
363 return 0;
364}
Kees Cook9321d522012-10-04 17:11:11 -0700365static inline void audit_fd_pair(int fd1, int fd2)
366{ }
367static inline int audit_sockaddr(int len, void *addr)
368{
369 return 0;
370}
371static inline void audit_mq_open(int oflag, umode_t mode, struct mq_attr *attr)
372{ }
373static inline void audit_mq_sendrecv(mqd_t mqdes, size_t msg_len,
374 unsigned int msg_prio,
375 const struct timespec *abs_timeout)
376{ }
377static inline void audit_mq_notify(mqd_t mqdes,
378 const struct sigevent *notification)
379{ }
380static inline void audit_mq_getsetattr(mqd_t mqdes, struct mq_attr *mqstat)
381{ }
382static inline int audit_log_bprm_fcaps(struct linux_binprm *bprm,
383 const struct cred *new,
384 const struct cred *old)
385{
386 return 0;
387}
388static inline void audit_log_capset(pid_t pid, const struct cred *new,
389 const struct cred *old)
390{ }
391static inline void audit_mmap_fd(int fd, int flags)
392{ }
393static inline void audit_ptrace(struct task_struct *t)
394{ }
Al Viro471a5c72006-07-10 08:29:24 -0400395#define audit_n_rules 0
Amy Griffise54dc242007-03-29 18:01:04 -0400396#define audit_signals 0
Eric Parisd7e75282012-01-03 14:23:06 -0500397#endif /* CONFIG_AUDITSYSCALL */
Linus Torvalds1da177e2005-04-16 15:20:36 -0700398
399#ifdef CONFIG_AUDIT
400/* These are defined in audit.c */
401 /* Public API */
Joe Perchesb9075fa2011-10-31 17:11:33 -0700402extern __printf(4, 5)
403void audit_log(struct audit_context *ctx, gfp_t gfp_mask, int type,
404 const char *fmt, ...);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700405
Al Viro9796fdd2005-10-21 03:22:03 -0400406extern struct audit_buffer *audit_log_start(struct audit_context *ctx, gfp_t gfp_mask, int type);
Joe Perchesb9075fa2011-10-31 17:11:33 -0700407extern __printf(2, 3)
408void audit_log_format(struct audit_buffer *ab, const char *fmt, ...);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700409extern void audit_log_end(struct audit_buffer *ab);
Eric Parisde6bbd12008-01-07 14:31:58 -0500410extern int audit_string_contains_control(const char *string,
411 size_t len);
Eric Parisb556f8a2008-04-18 10:12:59 -0400412extern void audit_log_n_hex(struct audit_buffer *ab,
413 const unsigned char *buf,
414 size_t len);
415extern void audit_log_n_string(struct audit_buffer *ab,
416 const char *buf,
417 size_t n);
Eric Parisb556f8a2008-04-18 10:12:59 -0400418extern void audit_log_n_untrustedstring(struct audit_buffer *ab,
419 const char *string,
420 size_t n);
Eric Parisde6bbd12008-01-07 14:31:58 -0500421extern void audit_log_untrustedstring(struct audit_buffer *ab,
83c7d092005-04-29 15:54:44 +0100422 const char *string);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700423extern void audit_log_d_path(struct audit_buffer *ab,
424 const char *prefix,
Al Viro66b3fad2012-03-14 21:48:20 -0400425 const struct path *path);
Eric Paris9d960982009-06-11 14:31:37 -0400426extern void audit_log_key(struct audit_buffer *ab,
427 char *key);
Kees Cooka51d9ea2012-07-25 17:29:08 -0700428extern void audit_log_link_denied(const char *operation,
429 struct path *link);
Miloslav Trmac522ed772007-07-15 23:40:56 -0700430extern void audit_log_lost(const char *message);
Mr Dash Four131ad622011-06-30 13:31:57 +0200431#ifdef CONFIG_SECURITY
432extern void audit_log_secctx(struct audit_buffer *ab, u32 secid);
433#else
Kees Cook9321d522012-10-04 17:11:11 -0700434static inline void audit_log_secctx(struct audit_buffer *ab, u32 secid)
435{ }
Mr Dash Four131ad622011-06-30 13:31:57 +0200436#endif
437
Ahmed S. Darwish9d57a7f2008-03-01 22:03:14 +0200438extern int audit_update_lsm_rules(void);
439
David Woodhousefe7752b2005-12-15 18:33:52 +0000440 /* Private API (for audit.c only) */
Eric Paris62062cf2013-04-16 13:08:43 -0400441extern int audit_filter_user(int type);
David Woodhousefe7752b2005-12-15 18:33:52 +0000442extern int audit_filter_type(int type);
Eric W. Biederman017143f2012-09-11 00:19:06 -0700443extern int audit_receive_filter(int type, int pid, int seq,
Eric W. Biedermane1760bd2012-09-10 22:39:43 -0700444 void *data, size_t datasz, kuid_t loginuid,
Eric Paris25323862008-04-18 10:09:25 -0400445 u32 sessionid, u32 sid);
Miloslav Trmac522ed772007-07-15 23:40:56 -0700446extern int audit_enabled;
Kees Cook9321d522012-10-04 17:11:11 -0700447#else /* CONFIG_AUDIT */
448static inline __printf(4, 5)
449void audit_log(struct audit_context *ctx, gfp_t gfp_mask, int type,
450 const char *fmt, ...)
451{ }
452static inline struct audit_buffer *audit_log_start(struct audit_context *ctx,
453 gfp_t gfp_mask, int type)
454{
455 return NULL;
456}
457static inline __printf(2, 3)
458void audit_log_format(struct audit_buffer *ab, const char *fmt, ...)
459{ }
460static inline void audit_log_end(struct audit_buffer *ab)
461{ }
462static inline void audit_log_n_hex(struct audit_buffer *ab,
463 const unsigned char *buf, size_t len)
464{ }
465static inline void audit_log_n_string(struct audit_buffer *ab,
466 const char *buf, size_t n)
467{ }
468static inline void audit_log_n_untrustedstring(struct audit_buffer *ab,
469 const char *string, size_t n)
470{ }
471static inline void audit_log_untrustedstring(struct audit_buffer *ab,
472 const char *string)
473{ }
474static inline void audit_log_d_path(struct audit_buffer *ab,
475 const char *prefix,
476 const struct path *path)
477{ }
478static inline void audit_log_key(struct audit_buffer *ab, char *key)
479{ }
480static inline void audit_log_link_denied(const char *string,
481 const struct path *link)
482{ }
483static inline void audit_log_secctx(struct audit_buffer *ab, u32 secid)
484{ }
Miloslav Trmac522ed772007-07-15 23:40:56 -0700485#define audit_enabled 0
Kees Cook9321d522012-10-04 17:11:11 -0700486#endif /* CONFIG_AUDIT */
487static inline void audit_log_string(struct audit_buffer *ab, const char *buf)
488{
489 audit_log_n_string(ab, buf, strlen(buf));
490}
491
Linus Torvalds1da177e2005-04-16 15:20:36 -0700492#endif