1 files changed, 21 insertions, 19 deletions

diff --git a/security/selinux/avc.c b/security/selinux/avc.c
index 85a6f66a873f..451502467a9b 100644
--- a/security/selinux/avc.c
+++ b/security/selinux/avc.c
@@ -242,7 +242,7 @@ void __init avc_init(void)
         avc_node_cachep = kmem_cache_create("avc_node", sizeof(struct avc_node),
                                              0, SLAB_PANIC, NULL, NULL);
 
-        audit_log(current->audit_context, "AVC INITIALIZED\n");
+        audit_log(current->audit_context, AUDIT_KERNEL, "AVC INITIALIZED\n");
 }
 
 int avc_get_hash_stats(char *page)
@@ -532,6 +532,7 @@ void avc_audit(u32 ssid, u32 tsid,
                u16 tclass, u32 requested,
                struct av_decision *avd, int result, struct avc_audit_data *a)
 {
+        struct task_struct *tsk = current;
         struct inode *inode = NULL;
         u32 denied, audited;
         struct audit_buffer *ab;
@@ -549,12 +550,18 @@ void avc_audit(u32 ssid, u32 tsid,
                         return;
         }
 
-        ab = audit_log_start(current->audit_context);
+        ab = audit_log_start(current->audit_context, AUDIT_AVC);
         if (!ab)
                 return;         /* audit_panic has been called */
         audit_log_format(ab, "avc:  %s ", denied ? "denied" : "granted");
         avc_dump_av(ab, tclass,audited);
         audit_log_format(ab, " for ");
+        if (a && a->tsk)
+                tsk = a->tsk;
+        if (tsk && tsk->pid) {
+                audit_log_format(ab, " pid=%d comm=", tsk->pid);
+                audit_log_untrustedstring(ab, tsk->comm);
+        }
         if (a) {
                 switch (a->type) {
                 case AVC_AUDIT_DATA_IPC:
@@ -566,21 +573,18 @@ void avc_audit(u32 ssid, u32 tsid,
                 case AVC_AUDIT_DATA_FS:
                         if (a->u.fs.dentry) {
                                 struct dentry *dentry = a->u.fs.dentry;
-                                if (a->u.fs.mnt) {
-                                        audit_log_d_path(ab, "path=", dentry,
-                                                        a->u.fs.mnt);
-                                } else {
-                                        audit_log_format(ab, " name=%s",
-                                                         dentry->d_name.name);
-                                }
+                                if (a->u.fs.mnt)
+                                        audit_avc_path(dentry, a->u.fs.mnt);
+                                audit_log_format(ab, " name=");
+                                audit_log_untrustedstring(ab, dentry->d_name.name);
                                 inode = dentry->d_inode;
                         } else if (a->u.fs.inode) {
                                 struct dentry *dentry;
                                 inode = a->u.fs.inode;
                                 dentry = d_find_alias(inode);
                                 if (dentry) {
-                                        audit_log_format(ab, " name=%s",
-                                                         dentry->d_name.name);
+                                        audit_log_format(ab, " name=");
+                                        audit_log_untrustedstring(ab, dentry->d_name.name);
                                         dput(dentry);
                                 }
                         }
@@ -623,22 +627,20 @@ void avc_audit(u32 ssid, u32 tsid,
                                 case AF_UNIX:
                                         u = unix_sk(sk);
                                         if (u->dentry) {
-                                                audit_log_d_path(ab, "path=",
-                                                        u->dentry, u->mnt);
+                                                audit_avc_path(u->dentry, u->mnt);
+                                                audit_log_format(ab, " name=");
+                                                audit_log_untrustedstring(ab, u->dentry->d_name.name);
                                                 break;
                                         }
                                         if (!u->addr)
                                                 break;
                                         len = u->addr->len-sizeof(short);
                                         p = &u->addr->name->sun_path[0];
+                                        audit_log_format(ab, " path=");
                                         if (*p)
-                                                audit_log_format(ab,
-                                                        "path=%*.*s", len,
-                                                        len, p);
+                                                audit_log_untrustedstring(ab, p);
                                         else
-                                                audit_log_format(ab,
-                                                        "path=@%*.*s", len-1,
-                                                        len-1, p+1);
+                                                audit_log_hex(ab, p, len);
                                         break;
                                 }
                         }