]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/blame - security/integrity/ima/ima_audit.c
iwlwifi: don't include iwl-dev.h from iwl-devtrace.h
[mirror_ubuntu-zesty-kernel.git] / security / integrity / ima / ima_audit.c
CommitLineData
3323eec9
MZ
1/*
2 * Copyright (C) 2008 IBM Corporation
3 * Author: Mimi Zohar <zohar@us.ibm.com>
4 *
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License as published by
7 * the Free Software Foundation, version 2 of the License.
8 *
9 * File: integrity_audit.c
10 * Audit calls for the integrity subsystem
11 */
12
13#include <linux/fs.h>
14#include <linux/audit.h>
15#include "ima.h"
16
17static int ima_audit;
18
19#ifdef CONFIG_IMA_AUDIT
20
21/* ima_audit_setup - enable informational auditing messages */
22static int __init ima_audit_setup(char *str)
23{
24 unsigned long audit;
3323eec9 25
07ff7a0b
MZ
26 if (!strict_strtoul(str, 0, &audit))
27 ima_audit = audit ? 1 : 0;
3323eec9
MZ
28 return 1;
29}
30__setup("ima_audit=", ima_audit_setup);
31#endif
32
33void integrity_audit_msg(int audit_msgno, struct inode *inode,
34 const unsigned char *fname, const char *op,
35 const char *cause, int result, int audit_info)
36{
37 struct audit_buffer *ab;
38
39 if (!ima_audit && audit_info == 1) /* Skip informational messages */
40 return;
41
42 ab = audit_log_start(current->audit_context, GFP_KERNEL, audit_msgno);
523979ad 43 audit_log_format(ab, "integrity: pid=%d uid=%u auid=%u ses=%u",
37bcbf13 44 current->pid, current_cred()->uid,
523979ad
MZ
45 audit_get_loginuid(current),
46 audit_get_sessionid(current));
3323eec9 47 audit_log_task_context(ab);
e5e520a7
MZ
48 audit_log_format(ab, " op=");
49 audit_log_string(ab, op);
50 audit_log_format(ab, " cause=");
51 audit_log_string(ab, cause);
3323eec9
MZ
52 audit_log_format(ab, " comm=");
53 audit_log_untrustedstring(ab, current->comm);
54 if (fname) {
55 audit_log_format(ab, " name=");
56 audit_log_untrustedstring(ab, fname);
57 }
58 if (inode)
59 audit_log_format(ab, " dev=%s ino=%lu",
60 inode->i_sb->s_id, inode->i_ino);
523979ad 61 audit_log_format(ab, " res=%d", !result ? 0 : 1);
3323eec9
MZ
62 audit_log_end(ab);
63}