Mimi Zohar | 3323eec9 | 2009-02-04 09:06:58 -0500 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (C) 2008 IBM Corporation |
| 3 | * Author: Mimi Zohar <zohar@us.ibm.com> |
| 4 | * |
| 5 | * This program is free software; you can redistribute it and/or modify |
| 6 | * it under the terms of the GNU General Public License as published by |
| 7 | * the Free Software Foundation, version 2 of the License. |
| 8 | * |
| 9 | * File: integrity_audit.c |
| 10 | * Audit calls for the integrity subsystem |
| 11 | */ |
| 12 | |
| 13 | #include <linux/fs.h> |
Tejun Heo | 5a0e3ad | 2010-03-24 17:04:11 +0900 | [diff] [blame] | 14 | #include <linux/gfp.h> |
Mimi Zohar | 3323eec9 | 2009-02-04 09:06:58 -0500 | [diff] [blame] | 15 | #include <linux/audit.h> |
Mimi Zohar | d726d8d | 2013-03-18 14:48:02 -0400 | [diff] [blame] | 16 | #include "integrity.h" |
Mimi Zohar | 3323eec9 | 2009-02-04 09:06:58 -0500 | [diff] [blame] | 17 | |
Mimi Zohar | d726d8d | 2013-03-18 14:48:02 -0400 | [diff] [blame] | 18 | static int integrity_audit_info; |
Mimi Zohar | 3323eec9 | 2009-02-04 09:06:58 -0500 | [diff] [blame] | 19 | |
Mimi Zohar | 3323eec9 | 2009-02-04 09:06:58 -0500 | [diff] [blame] | 20 | /* ima_audit_setup - enable informational auditing messages */ |
Mimi Zohar | d726d8d | 2013-03-18 14:48:02 -0400 | [diff] [blame] | 21 | static int __init integrity_audit_setup(char *str) |
Mimi Zohar | 3323eec9 | 2009-02-04 09:06:58 -0500 | [diff] [blame] | 22 | { |
| 23 | unsigned long audit; |
Mimi Zohar | 3323eec9 | 2009-02-04 09:06:58 -0500 | [diff] [blame] | 24 | |
Jingoo Han | 29707b2 | 2014-02-05 15:13:14 +0900 | [diff] [blame] | 25 | if (!kstrtoul(str, 0, &audit)) |
Mimi Zohar | d726d8d | 2013-03-18 14:48:02 -0400 | [diff] [blame] | 26 | integrity_audit_info = audit ? 1 : 0; |
Mimi Zohar | 3323eec9 | 2009-02-04 09:06:58 -0500 | [diff] [blame] | 27 | return 1; |
| 28 | } |
Mimi Zohar | d726d8d | 2013-03-18 14:48:02 -0400 | [diff] [blame] | 29 | __setup("integrity_audit=", integrity_audit_setup); |
Mimi Zohar | 3323eec9 | 2009-02-04 09:06:58 -0500 | [diff] [blame] | 30 | |
| 31 | void integrity_audit_msg(int audit_msgno, struct inode *inode, |
| 32 | const unsigned char *fname, const char *op, |
| 33 | const char *cause, int result, int audit_info) |
| 34 | { |
| 35 | struct audit_buffer *ab; |
Tetsuo Handa | 73a6b44a | 2013-12-24 20:49:01 +0900 | [diff] [blame^] | 36 | char name[TASK_COMM_LEN]; |
Mimi Zohar | 3323eec9 | 2009-02-04 09:06:58 -0500 | [diff] [blame] | 37 | |
Mimi Zohar | d726d8d | 2013-03-18 14:48:02 -0400 | [diff] [blame] | 38 | if (!integrity_audit_info && audit_info == 1) /* Skip info messages */ |
Mimi Zohar | 3323eec9 | 2009-02-04 09:06:58 -0500 | [diff] [blame] | 39 | return; |
| 40 | |
| 41 | ab = audit_log_start(current->audit_context, GFP_KERNEL, audit_msgno); |
Eric Paris | 34c111f | 2010-04-20 10:21:36 -0400 | [diff] [blame] | 42 | audit_log_format(ab, "pid=%d uid=%u auid=%u ses=%u", |
Eric W. Biederman | 8b94eea | 2012-05-25 18:24:12 -0600 | [diff] [blame] | 43 | current->pid, |
| 44 | from_kuid(&init_user_ns, current_cred()->uid), |
| 45 | from_kuid(&init_user_ns, audit_get_loginuid(current)), |
Mimi Zohar | 523979a | 2009-02-11 11:12:28 -0500 | [diff] [blame] | 46 | audit_get_sessionid(current)); |
Mimi Zohar | 3323eec9 | 2009-02-04 09:06:58 -0500 | [diff] [blame] | 47 | audit_log_task_context(ab); |
Mimi Zohar | e5e520a | 2009-05-05 13:13:00 -0400 | [diff] [blame] | 48 | audit_log_format(ab, " op="); |
| 49 | audit_log_string(ab, op); |
| 50 | audit_log_format(ab, " cause="); |
| 51 | audit_log_string(ab, cause); |
Mimi Zohar | 3323eec9 | 2009-02-04 09:06:58 -0500 | [diff] [blame] | 52 | audit_log_format(ab, " comm="); |
Tetsuo Handa | 73a6b44a | 2013-12-24 20:49:01 +0900 | [diff] [blame^] | 53 | audit_log_untrustedstring(ab, get_task_comm(name, current)); |
Mimi Zohar | 3323eec9 | 2009-02-04 09:06:58 -0500 | [diff] [blame] | 54 | if (fname) { |
| 55 | audit_log_format(ab, " name="); |
| 56 | audit_log_untrustedstring(ab, fname); |
| 57 | } |
Kees Cook | 41fdc30 | 2012-01-07 10:41:04 -0800 | [diff] [blame] | 58 | if (inode) { |
| 59 | audit_log_format(ab, " dev="); |
| 60 | audit_log_untrustedstring(ab, inode->i_sb->s_id); |
| 61 | audit_log_format(ab, " ino=%lu", inode->i_ino); |
| 62 | } |
Eric Paris | b0d5de4 | 2012-02-14 17:11:07 -0500 | [diff] [blame] | 63 | audit_log_format(ab, " res=%d", !result); |
Mimi Zohar | 3323eec9 | 2009-02-04 09:06:58 -0500 | [diff] [blame] | 64 | audit_log_end(ab); |
| 65 | } |