]>
Commit | Line | Data |
---|---|---|
fe7752ba DW |
1 | /* audit -- definition of audit_context structure and supporting types |
2 | * | |
3 | * Copyright 2003-2004 Red Hat, Inc. | |
4 | * Copyright 2005 Hewlett-Packard Development Company, L.P. | |
5 | * Copyright 2005 IBM Corporation | |
6 | * | |
7 | * This program is free software; you can redistribute it and/or modify | |
8 | * it under the terms of the GNU General Public License as published by | |
9 | * the Free Software Foundation; either version 2 of the License, or | |
10 | * (at your option) any later version. | |
11 | * | |
12 | * This program is distributed in the hope that it will be useful, | |
13 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
14 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
15 | * GNU General Public License for more details. | |
16 | * | |
17 | * You should have received a copy of the GNU General Public License | |
18 | * along with this program; if not, write to the Free Software | |
19 | * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA | |
20 | */ | |
21 | ||
22 | #include <linux/fs.h> | |
23 | #include <linux/audit.h> | |
24 | ||
25 | /* 0 = no checking | |
26 | 1 = put_count checking | |
27 | 2 = verbose put_count checking | |
28 | */ | |
29 | #define AUDIT_DEBUG 0 | |
30 | ||
31 | /* At task start time, the audit_state is set in the audit_context using | |
32 | a per-task filter. At syscall entry, the audit_state is augmented by | |
33 | the syscall filter. */ | |
34 | enum audit_state { | |
35 | AUDIT_DISABLED, /* Do not create per-task audit_context. | |
36 | * No syscall-specific audit records can | |
37 | * be generated. */ | |
38 | AUDIT_SETUP_CONTEXT, /* Create the per-task audit_context, | |
39 | * but don't necessarily fill it in at | |
40 | * syscall entry time (i.e., filter | |
41 | * instead). */ | |
42 | AUDIT_BUILD_CONTEXT, /* Create the per-task audit_context, | |
43 | * and always fill it in at syscall | |
44 | * entry time. This makes a full | |
45 | * syscall record available if some | |
46 | * other part of the kernel decides it | |
47 | * should be recorded. */ | |
48 | AUDIT_RECORD_CONTEXT /* Create the per-task audit_context, | |
49 | * always fill it in at syscall entry | |
50 | * time, and always write out the audit | |
51 | * record at syscall exit time. */ | |
52 | }; | |
53 | ||
54 | /* Rule lists */ | |
55 | struct audit_entry { | |
56 | struct list_head list; | |
57 | struct rcu_head rcu; | |
58 | struct audit_rule rule; | |
59 | }; | |
60 | ||
61 | ||
62 | extern int audit_pid; | |
63 | extern int audit_comparator(const u32 left, const u32 op, const u32 right); | |
64 | ||
65 | extern void audit_send_reply(int pid, int seq, int type, | |
66 | int done, int multi, | |
67 | void *payload, int size); | |
68 | extern void audit_log_lost(const char *message); | |
69 | extern void audit_panic(const char *message); | |
70 | extern struct semaphore audit_netlink_sem; |