aboutsummaryrefslogtreecommitdiffstats
path: root/security/apparmor/include/audit.h
diff options
context:
space:
mode:
Diffstat (limited to 'security/apparmor/include/audit.h')
-rw-r--r--security/apparmor/include/audit.h17
1 files changed, 10 insertions, 7 deletions
diff --git a/security/apparmor/include/audit.h b/security/apparmor/include/audit.h
index fdc4774318ba..c68839a44351 100644
--- a/security/apparmor/include/audit.h
+++ b/security/apparmor/include/audit.h
@@ -22,8 +22,7 @@
22#include <linux/slab.h> 22#include <linux/slab.h>
23 23
24#include "file.h" 24#include "file.h"
25 25#include "label.h"
26struct aa_profile;
27 26
28extern const char *const audit_mode_names[]; 27extern const char *const audit_mode_names[];
29#define AUDIT_MAX_INDEX 5 28#define AUDIT_MAX_INDEX 5
@@ -65,10 +64,12 @@ enum audit_type {
65#define OP_GETATTR "getattr" 64#define OP_GETATTR "getattr"
66#define OP_OPEN "open" 65#define OP_OPEN "open"
67 66
67#define OP_FRECEIVE "file_receive"
68#define OP_FPERM "file_perm" 68#define OP_FPERM "file_perm"
69#define OP_FLOCK "file_lock" 69#define OP_FLOCK "file_lock"
70#define OP_FMMAP "file_mmap" 70#define OP_FMMAP "file_mmap"
71#define OP_FMPROT "file_mprotect" 71#define OP_FMPROT "file_mprotect"
72#define OP_INHERIT "file_inherit"
72 73
73#define OP_CREATE "create" 74#define OP_CREATE "create"
74#define OP_POST_CREATE "post_create" 75#define OP_POST_CREATE "post_create"
@@ -91,6 +92,8 @@ enum audit_type {
91#define OP_CHANGE_HAT "change_hat" 92#define OP_CHANGE_HAT "change_hat"
92#define OP_CHANGE_PROFILE "change_profile" 93#define OP_CHANGE_PROFILE "change_profile"
93#define OP_CHANGE_ONEXEC "change_onexec" 94#define OP_CHANGE_ONEXEC "change_onexec"
95#define OP_STACK "stack"
96#define OP_STACK_ONEXEC "stack_onexec"
94 97
95#define OP_SETPROCATTR "setprocattr" 98#define OP_SETPROCATTR "setprocattr"
96#define OP_SETRLIMIT "setrlimit" 99#define OP_SETRLIMIT "setrlimit"
@@ -102,19 +105,19 @@ enum audit_type {
102 105
103struct apparmor_audit_data { 106struct apparmor_audit_data {
104 int error; 107 int error;
105 const char *op;
106 int type; 108 int type;
107 void *profile; 109 const char *op;
110 struct aa_label *label;
108 const char *name; 111 const char *name;
109 const char *info; 112 const char *info;
113 u32 request;
114 u32 denied;
110 union { 115 union {
111 /* these entries require a custom callback fn */ 116 /* these entries require a custom callback fn */
112 struct { 117 struct {
113 struct aa_profile *peer; 118 struct aa_label *peer;
114 struct { 119 struct {
115 const char *target; 120 const char *target;
116 u32 request;
117 u32 denied;
118 kuid_t ouid; 121 kuid_t ouid;
119 } fs; 122 } fs;
120 }; 123 };