Messages in this thread | | | Date | Thu, 6 Jul 2006 09:42:44 +0200 | From | Heiko Carstens <> | Subject | Re: [PATCH] audit syscall classes |
| |
On Sat, Jul 01, 2006 at 06:00:02PM +0000, Linux Kernel Mailing List wrote: > commit b915543b46a2aa599fdd2169e51bcfd88812a12b > tree 8025e6654829d4c245b5b6b6f47a84543ebffb7b > parent 6e5a2d1d32596850a0ebf7fb3e54c0d69901dabd > author Al Viro <viro@zeniv.linux.org.uk> Sat, 01 Jul 2006 11:56:16 -0400 > committer Al Viro <viro@zeniv.linux.org.uk> Sat, 01 Jul 2006 15:44:10 -0400 > > [PATCH] audit syscall classes > > Allow to tie upper bits of syscall bitmap in audit rules to kernel-defined > sets of syscalls. Infrastructure, a couple of classes (with 32bit counterparts > for biarch targets) and actual tie-in on i386, amd64 and ia64. > > Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> > > arch/i386/kernel/Makefile | 1 > arch/i386/kernel/audit.c | 23 ++++++++++++++++++ > arch/ia64/ia32/Makefile | 1 > arch/ia64/ia32/audit.c | 11 +++++++++ > arch/ia64/kernel/Makefile | 1 > arch/ia64/kernel/audit.c | 29 +++++++++++++++++++++++ > arch/x86_64/ia32/Makefile | 3 ++ > arch/x86_64/ia32/audit.c | 11 +++++++++ > arch/x86_64/kernel/Makefile | 1 > arch/x86_64/kernel/audit.c | 29 +++++++++++++++++++++++ > include/asm-generic/audit_change_attr.h | 18 ++++++++++++++ > include/asm-generic/audit_dir_write.h | 14 +++++++++++ > include/linux/audit.h | 7 +++++ > kernel/auditfilter.c | 39 ++++++++++++++++++++++++++++++++ > 14 files changed, 188 insertions(+)
Excuse my ignorance, but this looks like every architecture needs to add something like this. If it is needed, is there some easy way to test the implementation? - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |