diff options
Diffstat (limited to 'kernel/auditsc.c')
-rw-r--r-- | kernel/auditsc.c | 20 |
1 files changed, 11 insertions, 9 deletions
diff --git a/kernel/auditsc.c b/kernel/auditsc.c index 0b5b8a232b55..26fdfc092e35 100644 --- a/kernel/auditsc.c +++ b/kernel/auditsc.c | |||
@@ -149,7 +149,7 @@ struct audit_aux_data_execve { | |||
149 | struct audit_aux_data_pids { | 149 | struct audit_aux_data_pids { |
150 | struct audit_aux_data d; | 150 | struct audit_aux_data d; |
151 | pid_t target_pid[AUDIT_AUX_PIDS]; | 151 | pid_t target_pid[AUDIT_AUX_PIDS]; |
152 | uid_t target_auid[AUDIT_AUX_PIDS]; | 152 | kuid_t target_auid[AUDIT_AUX_PIDS]; |
153 | uid_t target_uid[AUDIT_AUX_PIDS]; | 153 | uid_t target_uid[AUDIT_AUX_PIDS]; |
154 | unsigned int target_sessionid[AUDIT_AUX_PIDS]; | 154 | unsigned int target_sessionid[AUDIT_AUX_PIDS]; |
155 | u32 target_sid[AUDIT_AUX_PIDS]; | 155 | u32 target_sid[AUDIT_AUX_PIDS]; |
@@ -214,7 +214,7 @@ struct audit_context { | |||
214 | int arch; | 214 | int arch; |
215 | 215 | ||
216 | pid_t target_pid; | 216 | pid_t target_pid; |
217 | uid_t target_auid; | 217 | kuid_t target_auid; |
218 | uid_t target_uid; | 218 | uid_t target_uid; |
219 | unsigned int target_sessionid; | 219 | unsigned int target_sessionid; |
220 | u32 target_sid; | 220 | u32 target_sid; |
@@ -1176,7 +1176,7 @@ static void audit_log_task_info(struct audit_buffer *ab, struct task_struct *tsk | |||
1176 | } | 1176 | } |
1177 | 1177 | ||
1178 | static int audit_log_pid_context(struct audit_context *context, pid_t pid, | 1178 | static int audit_log_pid_context(struct audit_context *context, pid_t pid, |
1179 | uid_t auid, uid_t uid, unsigned int sessionid, | 1179 | kuid_t auid, uid_t uid, unsigned int sessionid, |
1180 | u32 sid, char *comm) | 1180 | u32 sid, char *comm) |
1181 | { | 1181 | { |
1182 | struct audit_buffer *ab; | 1182 | struct audit_buffer *ab; |
@@ -1188,7 +1188,8 @@ static int audit_log_pid_context(struct audit_context *context, pid_t pid, | |||
1188 | if (!ab) | 1188 | if (!ab) |
1189 | return rc; | 1189 | return rc; |
1190 | 1190 | ||
1191 | audit_log_format(ab, "opid=%d oauid=%d ouid=%d oses=%d", pid, auid, | 1191 | audit_log_format(ab, "opid=%d oauid=%d ouid=%d oses=%d", pid, |
1192 | from_kuid(&init_user_ns, auid), | ||
1192 | uid, sessionid); | 1193 | uid, sessionid); |
1193 | if (security_secid_to_secctx(sid, &ctx, &len)) { | 1194 | if (security_secid_to_secctx(sid, &ctx, &len)) { |
1194 | audit_log_format(ab, " obj=(none)"); | 1195 | audit_log_format(ab, " obj=(none)"); |
@@ -1630,7 +1631,7 @@ static void audit_log_exit(struct audit_context *context, struct task_struct *ts | |||
1630 | context->name_count, | 1631 | context->name_count, |
1631 | context->ppid, | 1632 | context->ppid, |
1632 | context->pid, | 1633 | context->pid, |
1633 | tsk->loginuid, | 1634 | from_kuid(&init_user_ns, tsk->loginuid), |
1634 | context->uid, | 1635 | context->uid, |
1635 | context->gid, | 1636 | context->gid, |
1636 | context->euid, context->suid, context->fsuid, | 1637 | context->euid, context->suid, context->fsuid, |
@@ -2291,14 +2292,14 @@ static atomic_t session_id = ATOMIC_INIT(0); | |||
2291 | * | 2292 | * |
2292 | * Called (set) from fs/proc/base.c::proc_loginuid_write(). | 2293 | * Called (set) from fs/proc/base.c::proc_loginuid_write(). |
2293 | */ | 2294 | */ |
2294 | int audit_set_loginuid(uid_t loginuid) | 2295 | int audit_set_loginuid(kuid_t loginuid) |
2295 | { | 2296 | { |
2296 | struct task_struct *task = current; | 2297 | struct task_struct *task = current; |
2297 | struct audit_context *context = task->audit_context; | 2298 | struct audit_context *context = task->audit_context; |
2298 | unsigned int sessionid; | 2299 | unsigned int sessionid; |
2299 | 2300 | ||
2300 | #ifdef CONFIG_AUDIT_LOGINUID_IMMUTABLE | 2301 | #ifdef CONFIG_AUDIT_LOGINUID_IMMUTABLE |
2301 | if (task->loginuid != -1) | 2302 | if (uid_valid(task->loginuid)) |
2302 | return -EPERM; | 2303 | return -EPERM; |
2303 | #else /* CONFIG_AUDIT_LOGINUID_IMMUTABLE */ | 2304 | #else /* CONFIG_AUDIT_LOGINUID_IMMUTABLE */ |
2304 | if (!capable(CAP_AUDIT_CONTROL)) | 2305 | if (!capable(CAP_AUDIT_CONTROL)) |
@@ -2315,7 +2316,8 @@ int audit_set_loginuid(uid_t loginuid) | |||
2315 | "old auid=%u new auid=%u" | 2316 | "old auid=%u new auid=%u" |
2316 | " old ses=%u new ses=%u", | 2317 | " old ses=%u new ses=%u", |
2317 | task->pid, task_uid(task), | 2318 | task->pid, task_uid(task), |
2318 | task->loginuid, loginuid, | 2319 | from_kuid(&init_user_ns, task->loginuid), |
2320 | from_kuid(&init_user_ns, loginuid), | ||
2319 | task->sessionid, sessionid); | 2321 | task->sessionid, sessionid); |
2320 | audit_log_end(ab); | 2322 | audit_log_end(ab); |
2321 | } | 2323 | } |
@@ -2543,7 +2545,7 @@ int __audit_signal_info(int sig, struct task_struct *t) | |||
2543 | if (audit_pid && t->tgid == audit_pid) { | 2545 | if (audit_pid && t->tgid == audit_pid) { |
2544 | if (sig == SIGTERM || sig == SIGHUP || sig == SIGUSR1 || sig == SIGUSR2) { | 2546 | if (sig == SIGTERM || sig == SIGHUP || sig == SIGUSR1 || sig == SIGUSR2) { |
2545 | audit_sig_pid = tsk->pid; | 2547 | audit_sig_pid = tsk->pid; |
2546 | if (tsk->loginuid != -1) | 2548 | if (uid_valid(tsk->loginuid)) |
2547 | audit_sig_uid = tsk->loginuid; | 2549 | audit_sig_uid = tsk->loginuid; |
2548 | else | 2550 | else |
2549 | audit_sig_uid = uid; | 2551 | audit_sig_uid = uid; |