diff options
Diffstat (limited to 'security/apparmor/include/audit.h')
| -rw-r--r-- | security/apparmor/include/audit.h | 17 |
1 files changed, 10 insertions, 7 deletions
diff --git a/security/apparmor/include/audit.h b/security/apparmor/include/audit.h index fdc4774318ba..c68839a44351 100644 --- a/security/apparmor/include/audit.h +++ b/security/apparmor/include/audit.h | |||
| @@ -22,8 +22,7 @@ | |||
| 22 | #include <linux/slab.h> | 22 | #include <linux/slab.h> |
| 23 | 23 | ||
| 24 | #include "file.h" | 24 | #include "file.h" |
| 25 | 25 | #include "label.h" | |
| 26 | struct aa_profile; | ||
| 27 | 26 | ||
| 28 | extern const char *const audit_mode_names[]; | 27 | extern const char *const audit_mode_names[]; |
| 29 | #define AUDIT_MAX_INDEX 5 | 28 | #define AUDIT_MAX_INDEX 5 |
| @@ -65,10 +64,12 @@ enum audit_type { | |||
| 65 | #define OP_GETATTR "getattr" | 64 | #define OP_GETATTR "getattr" |
| 66 | #define OP_OPEN "open" | 65 | #define OP_OPEN "open" |
| 67 | 66 | ||
| 67 | #define OP_FRECEIVE "file_receive" | ||
| 68 | #define OP_FPERM "file_perm" | 68 | #define OP_FPERM "file_perm" |
| 69 | #define OP_FLOCK "file_lock" | 69 | #define OP_FLOCK "file_lock" |
| 70 | #define OP_FMMAP "file_mmap" | 70 | #define OP_FMMAP "file_mmap" |
| 71 | #define OP_FMPROT "file_mprotect" | 71 | #define OP_FMPROT "file_mprotect" |
| 72 | #define OP_INHERIT "file_inherit" | ||
| 72 | 73 | ||
| 73 | #define OP_CREATE "create" | 74 | #define OP_CREATE "create" |
| 74 | #define OP_POST_CREATE "post_create" | 75 | #define OP_POST_CREATE "post_create" |
| @@ -91,6 +92,8 @@ enum audit_type { | |||
| 91 | #define OP_CHANGE_HAT "change_hat" | 92 | #define OP_CHANGE_HAT "change_hat" |
| 92 | #define OP_CHANGE_PROFILE "change_profile" | 93 | #define OP_CHANGE_PROFILE "change_profile" |
| 93 | #define OP_CHANGE_ONEXEC "change_onexec" | 94 | #define OP_CHANGE_ONEXEC "change_onexec" |
| 95 | #define OP_STACK "stack" | ||
| 96 | #define OP_STACK_ONEXEC "stack_onexec" | ||
| 94 | 97 | ||
| 95 | #define OP_SETPROCATTR "setprocattr" | 98 | #define OP_SETPROCATTR "setprocattr" |
| 96 | #define OP_SETRLIMIT "setrlimit" | 99 | #define OP_SETRLIMIT "setrlimit" |
| @@ -102,19 +105,19 @@ enum audit_type { | |||
| 102 | 105 | ||
| 103 | struct apparmor_audit_data { | 106 | struct apparmor_audit_data { |
| 104 | int error; | 107 | int error; |
| 105 | const char *op; | ||
| 106 | int type; | 108 | int type; |
| 107 | void *profile; | 109 | const char *op; |
| 110 | struct aa_label *label; | ||
| 108 | const char *name; | 111 | const char *name; |
| 109 | const char *info; | 112 | const char *info; |
| 113 | u32 request; | ||
| 114 | u32 denied; | ||
| 110 | union { | 115 | union { |
| 111 | /* these entries require a custom callback fn */ | 116 | /* these entries require a custom callback fn */ |
| 112 | struct { | 117 | struct { |
| 113 | struct aa_profile *peer; | 118 | struct aa_label *peer; |
| 114 | struct { | 119 | struct { |
| 115 | const char *target; | 120 | const char *target; |
| 116 | u32 request; | ||
| 117 | u32 denied; | ||
| 118 | kuid_t ouid; | 121 | kuid_t ouid; |
| 119 | } fs; | 122 | } fs; |
| 120 | }; | 123 | }; |
