[GitHub/mt8127/android_kernel_alcatel_ttab.git] / include / linux / audit.h

/* audit.h -- Auditing support
 *
 * Copyright 2003-2004 Red Hat Inc., Durham, North Carolina.
 * All Rights Reserved.
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 *
 * Written by Rickard E. (Rik) Faith <faith@redhat.com>
 *
 */
#ifndef _LINUX_AUDIT_H_
#define _LINUX_AUDIT_H_

#include <linux/sched.h>
#include <uapi/linux/audit.h>

struct audit_sig_info {
	uid_t		uid;
	pid_t		pid;
	char		ctx[0];
};

struct audit_buffer;
struct audit_context;
struct inode;
struct netlink_skb_parms;
struct path;
struct linux_binprm;
struct mq_attr;
struct mqstat;
struct audit_watch;
struct audit_tree;

struct audit_krule {
	int			vers_ops;
	u32			flags;
	u32			listnr;
	u32			action;
	u32			mask[AUDIT_BITMASK_SIZE];
	u32			buflen; /* for data alloc on list rules */
	u32			field_count;
	char			*filterkey; /* ties events to rules */
	struct audit_field	*fields;
	struct audit_field	*arch_f; /* quick access to arch field */
	struct audit_field	*inode_f; /* quick access to an inode field */
	struct audit_watch	*watch;	/* associated watch */
	struct audit_tree	*tree;	/* associated watched tree */
	struct list_head	rlist;	/* entry in audit_{watch,tree}.rules list */
	struct list_head	list;	/* for AUDIT_LIST* purposes only */
	u64			prio;
};

struct audit_field {
	u32				type;
	u32				val;
	kuid_t				uid;
	kgid_t				gid;
	u32				op;
	char				*lsm_str;
	void				*lsm_rule;
};

extern int __init audit_register_class(int class, unsigned *list);
extern int audit_classify_syscall(int abi, unsigned syscall);
extern int audit_classify_arch(int arch);

/* audit_names->type values */
#define	AUDIT_TYPE_UNKNOWN	0	/* we don't know yet */
#define	AUDIT_TYPE_NORMAL	1	/* a "normal" audit record */
#define	AUDIT_TYPE_PARENT	2	/* a parent audit record */
#define	AUDIT_TYPE_CHILD_DELETE 3	/* a child being deleted */
#define	AUDIT_TYPE_CHILD_CREATE 4	/* a child being created */

struct filename;

#ifdef CONFIG_AUDITSYSCALL
/* These are defined in auditsc.c */
				/* Public API */
extern int  audit_alloc(struct task_struct *task);
extern void __audit_free(struct task_struct *task);
extern void __audit_syscall_entry(int arch,
				  int major, unsigned long a0, unsigned long a1,
				  unsigned long a2, unsigned long a3);
extern void __audit_syscall_exit(int ret_success, long ret_value);
extern struct filename *__audit_reusename(const __user char *uptr);
extern void __audit_getname(struct filename *name);
extern void audit_putname(struct filename *name);
extern void __audit_inode(struct filename *name, const struct dentry *dentry,
				unsigned int parent);
extern void __audit_inode_child(const struct inode *parent,
				const struct dentry *dentry,
				const unsigned char type);
extern void __audit_seccomp(unsigned long syscall, long signr, int code);
extern void __audit_ptrace(struct task_struct *t);

static inline int audit_dummy_context(void)
{
	void *p = current->audit_context;
	return !p || *(int *)p;
}
static inline void audit_free(struct task_struct *task)
{
	if (unlikely(task->audit_context))
		__audit_free(task);
}
static inline void audit_syscall_entry(int arch, int major, unsigned long a0,
				       unsigned long a1, unsigned long a2,
				       unsigned long a3)
{
	if (unlikely(!audit_dummy_context()))
		__audit_syscall_entry(arch, major, a0, a1, a2, a3);
}
static inline void audit_syscall_exit(void *pt_regs)
{
	if (unlikely(current->audit_context)) {
		int success = is_syscall_success(pt_regs);
		int return_code = regs_return_value(pt_regs);

		__audit_syscall_exit(success, return_code);
	}
}
static inline struct filename *audit_reusename(const __user char *name)
{
	if (unlikely(!audit_dummy_context()))
		return __audit_reusename(name);
	return NULL;
}
static inline void audit_getname(struct filename *name)
{
	if (unlikely(!audit_dummy_context()))
		__audit_getname(name);
}
static inline void audit_inode(struct filename *name, const struct dentry *dentry,
				unsigned int parent) {
	if (unlikely(!audit_dummy_context()))
		__audit_inode(name, dentry, parent);
}
static inline void audit_inode_child(const struct inode *parent,
				     const struct dentry *dentry,
				     const unsigned char type) {
	if (unlikely(!audit_dummy_context()))
		__audit_inode_child(parent, dentry, type);
}
void audit_core_dumps(long signr);

static inline void audit_seccomp(unsigned long syscall, long signr, int code)
{
	if (unlikely(!audit_dummy_context()))
		__audit_seccomp(syscall, signr, code);
}

static inline void audit_ptrace(struct task_struct *t)
{
	if (unlikely(!audit_dummy_context()))
		__audit_ptrace(t);
}

				/* Private API (for audit.c only) */
extern unsigned int audit_serial(void);
extern int auditsc_get_stamp(struct audit_context *ctx,
			      struct timespec *t, unsigned int *serial);
extern int audit_set_loginuid(kuid_t loginuid);

static inline kuid_t audit_get_loginuid(struct task_struct *tsk)
{
	return tsk->loginuid;
}

static inline int audit_get_sessionid(struct task_struct *tsk)
{
	return tsk->sessionid;
}

extern void audit_log_task_context(struct audit_buffer *ab);
extern void audit_log_task_info(struct audit_buffer *ab, struct task_struct *tsk);
extern void __audit_ipc_obj(struct kern_ipc_perm *ipcp);
extern void __audit_ipc_set_perm(unsigned long qbytes, uid_t uid, gid_t gid, umode_t mode);
extern int __audit_bprm(struct linux_binprm *bprm);
extern void __audit_socketcall(int nargs, unsigned long *args);
extern int __audit_sockaddr(int len, void *addr);
extern void __audit_fd_pair(int fd1, int fd2);
extern void __audit_mq_open(int oflag, umode_t mode, struct mq_attr *attr);
extern void __audit_mq_sendrecv(mqd_t mqdes, size_t msg_len, unsigned int msg_prio, const struct timespec *abs_timeout);
extern void __audit_mq_notify(mqd_t mqdes, const struct sigevent *notification);
extern void __audit_mq_getsetattr(mqd_t mqdes, struct mq_attr *mqstat);
extern int __audit_log_bprm_fcaps(struct linux_binprm *bprm,
				  const struct cred *new,
				  const struct cred *old);
extern void __audit_log_capset(pid_t pid, const struct cred *new, const struct cred *old);
extern void __audit_mmap_fd(int fd, int flags);

static inline void audit_ipc_obj(struct kern_ipc_perm *ipcp)
{
	if (unlikely(!audit_dummy_context()))
		__audit_ipc_obj(ipcp);
}
static inline void audit_fd_pair(int fd1, int fd2)
{
	if (unlikely(!audit_dummy_context()))
		__audit_fd_pair(fd1, fd2);
}
static inline void audit_ipc_set_perm(unsigned long qbytes, uid_t uid, gid_t gid, umode_t mode)
{
	if (unlikely(!audit_dummy_context()))
		__audit_ipc_set_perm(qbytes, uid, gid, mode);
}
static inline int audit_bprm(struct linux_binprm *bprm)
{
	if (unlikely(!audit_dummy_context()))
		return __audit_bprm(bprm);
	return 0;
}
static inline void audit_socketcall(int nargs, unsigned long *args)
{
	if (unlikely(!audit_dummy_context()))
		__audit_socketcall(nargs, args);
}
static inline int audit_sockaddr(int len, void *addr)
{
	if (unlikely(!audit_dummy_context()))
		return __audit_sockaddr(len, addr);
	return 0;
}
static inline void audit_mq_open(int oflag, umode_t mode, struct mq_attr *attr)
{
	if (unlikely(!audit_dummy_context()))
		__audit_mq_open(oflag, mode, attr);
}
static inline void audit_mq_sendrecv(mqd_t mqdes, size_t msg_len, unsigned int msg_prio, const struct timespec *abs_timeout)
{
	if (unlikely(!audit_dummy_context()))
		__audit_mq_sendrecv(mqdes, msg_len, msg_prio, abs_timeout);
}
static inline void audit_mq_notify(mqd_t mqdes, const struct sigevent *notification)
{
	if (unlikely(!audit_dummy_context()))
		__audit_mq_notify(mqdes, notification);
}
static inline void audit_mq_getsetattr(mqd_t mqdes, struct mq_attr *mqstat)
{
	if (unlikely(!audit_dummy_context()))
		__audit_mq_getsetattr(mqdes, mqstat);
}

static inline int audit_log_bprm_fcaps(struct linux_binprm *bprm,
				       const struct cred *new,
				       const struct cred *old)
{
	if (unlikely(!audit_dummy_context()))
		return __audit_log_bprm_fcaps(bprm, new, old);
	return 0;
}

static inline void audit_log_capset(pid_t pid, const struct cred *new,
				   const struct cred *old)
{
	if (unlikely(!audit_dummy_context()))
		__audit_log_capset(pid, new, old);
}

static inline void audit_mmap_fd(int fd, int flags)
{
	if (unlikely(!audit_dummy_context()))
		__audit_mmap_fd(fd, flags);
}

extern int audit_n_rules;
extern int audit_signals;
#else /* CONFIG_AUDITSYSCALL */
static inline int audit_alloc(struct task_struct *task)
{
	return 0;
}
static inline void audit_free(struct task_struct *task)
{ }
static inline void audit_syscall_entry(int arch, int major, unsigned long a0,
				       unsigned long a1, unsigned long a2,
				       unsigned long a3)
{ }
static inline void audit_syscall_exit(void *pt_regs)
{ }
static inline int audit_dummy_context(void)
{
	return 1;
}
static inline struct filename *audit_reusename(const __user char *name)
{
	return NULL;
}
static inline void audit_getname(struct filename *name)
{ }
static inline void audit_putname(struct filename *name)
{ }
static inline void __audit_inode(struct filename *name,
					const struct dentry *dentry,
					unsigned int parent)
{ }
static inline void __audit_inode_child(const struct inode *parent,
					const struct dentry *dentry,
					const unsigned char type)
{ }
static inline void audit_inode(struct filename *name,
				const struct dentry *dentry,
				unsigned int parent)
{ }
static inline void audit_inode_child(const struct inode *parent,
				     const struct dentry *dentry,
				     const unsigned char type)
{ }
static inline void audit_core_dumps(long signr)
{ }
static inline void __audit_seccomp(unsigned long syscall, long signr, int code)
{ }
static inline void audit_seccomp(unsigned long syscall, long signr, int code)
{ }
static inline int auditsc_get_stamp(struct audit_context *ctx,
			      struct timespec *t, unsigned int *serial)
{
	return 0;
}
static inline kuid_t audit_get_loginuid(struct task_struct *tsk)
{
	return INVALID_UID;
}
static inline int audit_get_sessionid(struct task_struct *tsk)
{
	return -1;
}
static inline void audit_log_task_context(struct audit_buffer *ab)
{ }
static inline void audit_log_task_info(struct audit_buffer *ab,
				       struct task_struct *tsk)
{ }
static inline void audit_ipc_obj(struct kern_ipc_perm *ipcp)
{ }
static inline void audit_ipc_set_perm(unsigned long qbytes, uid_t uid,
					gid_t gid, umode_t mode)
{ }
static inline int audit_bprm(struct linux_binprm *bprm)
{
	return 0;
}
static inline void audit_socketcall(int nargs, unsigned long *args)
{ }
static inline void audit_fd_pair(int fd1, int fd2)
{ }
static inline int audit_sockaddr(int len, void *addr)
{
	return 0;
}
static inline void audit_mq_open(int oflag, umode_t mode, struct mq_attr *attr)
{ }
static inline void audit_mq_sendrecv(mqd_t mqdes, size_t msg_len,
				     unsigned int msg_prio,
				     const struct timespec *abs_timeout)
{ }
static inline void audit_mq_notify(mqd_t mqdes,
				   const struct sigevent *notification)
{ }
static inline void audit_mq_getsetattr(mqd_t mqdes, struct mq_attr *mqstat)
{ }
static inline int audit_log_bprm_fcaps(struct linux_binprm *bprm,
				       const struct cred *new,
				       const struct cred *old)
{
	return 0;
}
static inline void audit_log_capset(pid_t pid, const struct cred *new,
				   const struct cred *old)
{ }
static inline void audit_mmap_fd(int fd, int flags)
{ }
static inline void audit_ptrace(struct task_struct *t)
{ }
#define audit_n_rules 0
#define audit_signals 0
#endif /* CONFIG_AUDITSYSCALL */

#ifdef CONFIG_AUDIT
/* These are defined in audit.c */
				/* Public API */
extern __printf(4, 5)
void audit_log(struct audit_context *ctx, gfp_t gfp_mask, int type,
	       const char *fmt, ...);

extern struct audit_buffer *audit_log_start(struct audit_context *ctx, gfp_t gfp_mask, int type);
extern __printf(2, 3)
void audit_log_format(struct audit_buffer *ab, const char *fmt, ...);
extern void		    audit_log_end(struct audit_buffer *ab);
extern int		    audit_string_contains_control(const char *string,
							  size_t len);
extern void		    audit_log_n_hex(struct audit_buffer *ab,
					  const unsigned char *buf,
					  size_t len);
extern void		    audit_log_n_string(struct audit_buffer *ab,
					       const char *buf,
					       size_t n);
extern void		    audit_log_n_untrustedstring(struct audit_buffer *ab,
							const char *string,
							size_t n);
extern void		    audit_log_untrustedstring(struct audit_buffer *ab,
						      const char *string);
extern void		    audit_log_d_path(struct audit_buffer *ab,
					     const char *prefix,
					     const struct path *path);
extern void		    audit_log_key(struct audit_buffer *ab,
					  char *key);
extern void		    audit_log_link_denied(const char *operation,
						  struct path *link);
extern void		    audit_log_lost(const char *message);
#ifdef CONFIG_SECURITY
extern void 		    audit_log_secctx(struct audit_buffer *ab, u32 secid);
#else
static inline void	    audit_log_secctx(struct audit_buffer *ab, u32 secid)
{ }
#endif

extern int		    audit_update_lsm_rules(void);

				/* Private API (for audit.c only) */
extern int audit_filter_user(void);
extern int audit_filter_type(int type);
extern int  audit_receive_filter(int type, int pid, int seq,
				void *data, size_t datasz, kuid_t loginuid,
				u32 sessionid, u32 sid);
extern int audit_enabled;
#else /* CONFIG_AUDIT */
static inline __printf(4, 5)
void audit_log(struct audit_context *ctx, gfp_t gfp_mask, int type,
	       const char *fmt, ...)
{ }
static inline struct audit_buffer *audit_log_start(struct audit_context *ctx,
						   gfp_t gfp_mask, int type)
{
	return NULL;
}
static inline __printf(2, 3)
void audit_log_format(struct audit_buffer *ab, const char *fmt, ...)
{ }
static inline void audit_log_end(struct audit_buffer *ab)
{ }
static inline void audit_log_n_hex(struct audit_buffer *ab,
				   const unsigned char *buf, size_t len)
{ }
static inline void audit_log_n_string(struct audit_buffer *ab,
				      const char *buf, size_t n)
{ }
static inline void  audit_log_n_untrustedstring(struct audit_buffer *ab,
						const char *string, size_t n)
{ }
static inline void audit_log_untrustedstring(struct audit_buffer *ab,
					     const char *string)
{ }
static inline void audit_log_d_path(struct audit_buffer *ab,
				    const char *prefix,
				    const struct path *path)
{ }
static inline void audit_log_key(struct audit_buffer *ab, char *key)
{ }
static inline void audit_log_link_denied(const char *string,
					 const struct path *link)
{ }
static inline void audit_log_secctx(struct audit_buffer *ab, u32 secid)
{ }
#define audit_enabled 0
#endif /* CONFIG_AUDIT */
static inline void audit_log_string(struct audit_buffer *ab, const char *buf)
{
	audit_log_n_string(ab, buf, strlen(buf));
}

#endif
Commit	Line	Data
85c8721f	1	/* audit.h -- Auditing support
1da177e4 LT	2	*
	3	* Copyright 2003-2004 Red Hat Inc., Durham, North Carolina.
	4	* All Rights Reserved.
	5	*
	6	* This program is free software; you can redistribute it and/or modify
	7	* it under the terms of the GNU General Public License as published by
	8	* the Free Software Foundation; either version 2 of the License, or
	9	* (at your option) any later version.
	10	*
	11	* This program is distributed in the hope that it will be useful,
	12	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	13	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	14	* GNU General Public License for more details.
	15	*
	16	* You should have received a copy of the GNU General Public License
	17	* along with this program; if not, write to the Free Software
	18	* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
	19	*
	20	* Written by Rickard E. (Rik) Faith <faith@redhat.com>
	21	*
	22	*/
1da177e4 LT	23	#ifndef _LINUX_AUDIT_H_
	24	#define _LINUX_AUDIT_H_
	25
f001e47f	26	#include <linux/sched.h>
607ca46e	27	#include <uapi/linux/audit.h>
1da177e4	28
c2f0c7c3 SG	29	struct audit_sig_info {
	30	uid_t uid;
	31	pid_t pid;
e1396065	32	char ctx[0];
c2f0c7c3 SG	33	};
c2f0c7c3 SG	34
1da177e4 LT	35	struct audit_buffer;
	36	struct audit_context;
	37	struct inode;
5bb289b5	38	struct netlink_skb_parms;
37721e1b	39	struct path;
473ae30b	40	struct linux_binprm;
20ca73bc GW	41	struct mq_attr;
20ca73bc GW	42	struct mqstat;
9d57a7f9 AD	43	struct audit_watch;
	44	struct audit_tree;
	45
	46	struct audit_krule {
	47	int vers_ops;
	48	u32 flags;
	49	u32 listnr;
	50	u32 action;
	51	u32 mask[AUDIT_BITMASK_SIZE];
	52	u32 buflen; /* for data alloc on list rules */
	53	u32 field_count;
	54	char filterkey; / ties events to rules */
	55	struct audit_field *fields;
	56	struct audit_field arch_f; / quick access to arch field */
	57	struct audit_field inode_f; / quick access to an inode field */
	58	struct audit_watch watch; / associated watch */
	59	struct audit_tree tree; / associated watched tree */
	60	struct list_head rlist; /* entry in audit_{watch,tree}.rules list */
e45aa212	61	struct list_head list; /* for AUDIT_LIST* purposes only */
0590b933	62	u64 prio;
9d57a7f9 AD	63	};
	64
	65	struct audit_field {
	66	u32 type;
	67	u32 val;
ca57ec0f EB	68	kuid_t uid;
ca57ec0f EB	69	kgid_t gid;
9d57a7f9	70	u32 op;
04305e4a AD	71	char *lsm_str;
04305e4a AD	72	void *lsm_rule;
9d57a7f9	73	};
1da177e4	74
b915543b	75	extern int __init audit_register_class(int class, unsigned *list);
55669bfa	76	extern int audit_classify_syscall(int abi, unsigned syscall);
e54dc243	77	extern int audit_classify_arch(int arch);
78e2e802 JL	78
	79	/* audit_names->type values */
	80	#define AUDIT_TYPE_UNKNOWN 0 /* we don't know yet */
	81	#define AUDIT_TYPE_NORMAL 1 /* a "normal" audit record */
bfcec708	82	#define AUDIT_TYPE_PARENT 2 /* a parent audit record */
4fa6b5ec JL	83	#define AUDIT_TYPE_CHILD_DELETE 3 /* a child being deleted */
4fa6b5ec JL	84	#define AUDIT_TYPE_CHILD_CREATE 4 /* a child being created */
78e2e802	85
91a27b2a JL	86	struct filename;
91a27b2a JL	87
1da177e4 LT	88	#ifdef CONFIG_AUDITSYSCALL
	89	/* These are defined in auditsc.c */
	90	/* Public API */
	91	extern int audit_alloc(struct task_struct *task);
a4ff8dba	92	extern void __audit_free(struct task_struct *task);
b05d8447 EP	93	extern void __audit_syscall_entry(int arch,
	94	int major, unsigned long a0, unsigned long a1,
	95	unsigned long a2, unsigned long a3);
d7e7528b	96	extern void __audit_syscall_exit(int ret_success, long ret_value);
7ac86265	97	extern struct filename __audit_reusename(const __user char uptr);
91a27b2a JL	98	extern void __audit_getname(struct filename *name);
91a27b2a JL	99	extern void audit_putname(struct filename *name);
adb5c247	100	extern void __audit_inode(struct filename name, const struct dentry dentry,
bfcec708	101	unsigned int parent);
c43a25ab	102	extern void __audit_inode_child(const struct inode *parent,
4fa6b5ec JL	103	const struct dentry *dentry,
4fa6b5ec JL	104	const unsigned char type);
3dc1c1b2	105	extern void __audit_seccomp(unsigned long syscall, long signr, int code);
a5cb013d AV	106	extern void __audit_ptrace(struct task_struct *t);
a5cb013d AV	107
d51374ad AV	108	static inline int audit_dummy_context(void)
	109	{
	110	void *p = current->audit_context;
	111	return !p \|\| (int )p;
	112	}
a4ff8dba EP	113	static inline void audit_free(struct task_struct *task)
	114	{
	115	if (unlikely(task->audit_context))
	116	__audit_free(task);
	117	}
b05d8447 EP	118	static inline void audit_syscall_entry(int arch, int major, unsigned long a0,
	119	unsigned long a1, unsigned long a2,
	120	unsigned long a3)
	121	{
	122	if (unlikely(!audit_dummy_context()))
	123	__audit_syscall_entry(arch, major, a0, a1, a2, a3);
	124	}
d7e7528b EP	125	static inline void audit_syscall_exit(void *pt_regs)
	126	{
	127	if (unlikely(current->audit_context)) {
	128	int success = is_syscall_success(pt_regs);
	129	int return_code = regs_return_value(pt_regs);
	130
	131	__audit_syscall_exit(success, return_code);
	132	}
	133	}
7ac86265 JL	134	static inline struct filename audit_reusename(const __user char name)
	135	{
	136	if (unlikely(!audit_dummy_context()))
	137	return __audit_reusename(name);
	138	return NULL;
	139	}
91a27b2a	140	static inline void audit_getname(struct filename *name)
d8945bb5	141	{
5ac3a9c2	142	if (unlikely(!audit_dummy_context()))
d8945bb5 AV	143	__audit_getname(name);
d8945bb5 AV	144	}
adb5c247	145	static inline void audit_inode(struct filename name, const struct dentry dentry,
bfcec708	146	unsigned int parent) {
5ac3a9c2	147	if (unlikely(!audit_dummy_context()))
bfcec708	148	__audit_inode(name, dentry, parent);
73241ccc	149	}
c43a25ab	150	static inline void audit_inode_child(const struct inode *parent,
4fa6b5ec JL	151	const struct dentry *dentry,
4fa6b5ec JL	152	const unsigned char type) {
5ac3a9c2	153	if (unlikely(!audit_dummy_context()))
4fa6b5ec	154	__audit_inode_child(parent, dentry, type);
73241ccc	155	}
0a4ff8c2	156	void audit_core_dumps(long signr);
1da177e4	157
3dc1c1b2	158	static inline void audit_seccomp(unsigned long syscall, long signr, int code)
85e7bac3 EP	159	{
85e7bac3 EP	160	if (unlikely(!audit_dummy_context()))
3dc1c1b2	161	__audit_seccomp(syscall, signr, code);
85e7bac3 EP	162	}
85e7bac3 EP	163
a5cb013d AV	164	static inline void audit_ptrace(struct task_struct *t)
	165	{
	166	if (unlikely(!audit_dummy_context()))
	167	__audit_ptrace(t);
	168	}
	169
1da177e4	170	/* Private API (for audit.c only) */
bfb4496e	171	extern unsigned int audit_serial(void);
48887e63	172	extern int auditsc_get_stamp(struct audit_context *ctx,
bfb4496e	173	struct timespec t, unsigned int serial);
9321d526 KC	174	extern int audit_set_loginuid(kuid_t loginuid);
	175
	176	static inline kuid_t audit_get_loginuid(struct task_struct *tsk)
	177	{
	178	return tsk->loginuid;
	179	}
	180
	181	static inline int audit_get_sessionid(struct task_struct *tsk)
	182	{
	183	return tsk->sessionid;
	184	}
	185
161a09e7	186	extern void audit_log_task_context(struct audit_buffer *ab);
e23eb920	187	extern void audit_log_task_info(struct audit_buffer ab, struct task_struct tsk);
a33e6751	188	extern void __audit_ipc_obj(struct kern_ipc_perm *ipcp);
2570ebbd	189	extern void __audit_ipc_set_perm(unsigned long qbytes, uid_t uid, gid_t gid, umode_t mode);
07c49417 EP	190	extern int __audit_bprm(struct linux_binprm *bprm);
	191	extern void __audit_socketcall(int nargs, unsigned long *args);
	192	extern int __audit_sockaddr(int len, void *addr);
157cf649	193	extern void __audit_fd_pair(int fd1, int fd2);
df0a4283	194	extern void __audit_mq_open(int oflag, umode_t mode, struct mq_attr *attr);
c32c8af4	195	extern void __audit_mq_sendrecv(mqd_t mqdes, size_t msg_len, unsigned int msg_prio, const struct timespec *abs_timeout);
20114f71	196	extern void __audit_mq_notify(mqd_t mqdes, const struct sigevent *notification);
7392906e	197	extern void __audit_mq_getsetattr(mqd_t mqdes, struct mq_attr *mqstat);
d84f4f99 DH	198	extern int __audit_log_bprm_fcaps(struct linux_binprm *bprm,
	199	const struct cred *new,
	200	const struct cred *old);
57f71a0a	201	extern void __audit_log_capset(pid_t pid, const struct cred new, const struct cred old);
120a795d	202	extern void __audit_mmap_fd(int fd, int flags);
d8945bb5	203
a33e6751	204	static inline void audit_ipc_obj(struct kern_ipc_perm *ipcp)
d8945bb5	205	{
5ac3a9c2	206	if (unlikely(!audit_dummy_context()))
a33e6751	207	__audit_ipc_obj(ipcp);
db349509	208	}
157cf649	209	static inline void audit_fd_pair(int fd1, int fd2)
d8945bb5	210	{
5ac3a9c2	211	if (unlikely(!audit_dummy_context()))
157cf649	212	__audit_fd_pair(fd1, fd2);
d8945bb5	213	}
2570ebbd	214	static inline void audit_ipc_set_perm(unsigned long qbytes, uid_t uid, gid_t gid, umode_t mode)
20ca73bc	215	{
5ac3a9c2	216	if (unlikely(!audit_dummy_context()))
e816f370	217	__audit_ipc_set_perm(qbytes, uid, gid, mode);
20ca73bc	218	}
07c49417 EP	219	static inline int audit_bprm(struct linux_binprm *bprm)
	220	{
	221	if (unlikely(!audit_dummy_context()))
	222	return __audit_bprm(bprm);
	223	return 0;
	224	}
	225	static inline void audit_socketcall(int nargs, unsigned long *args)
	226	{
	227	if (unlikely(!audit_dummy_context()))
	228	__audit_socketcall(nargs, args);
	229	}
	230	static inline int audit_sockaddr(int len, void *addr)
	231	{
	232	if (unlikely(!audit_dummy_context()))
	233	return __audit_sockaddr(len, addr);
	234	return 0;
	235	}
df0a4283	236	static inline void audit_mq_open(int oflag, umode_t mode, struct mq_attr *attr)
20ca73bc	237	{
5ac3a9c2	238	if (unlikely(!audit_dummy_context()))
564f6993	239	__audit_mq_open(oflag, mode, attr);
20ca73bc	240	}
c32c8af4	241	static inline void audit_mq_sendrecv(mqd_t mqdes, size_t msg_len, unsigned int msg_prio, const struct timespec *abs_timeout)
20ca73bc	242	{
5ac3a9c2	243	if (unlikely(!audit_dummy_context()))
c32c8af4	244	__audit_mq_sendrecv(mqdes, msg_len, msg_prio, abs_timeout);
20ca73bc	245	}
20114f71	246	static inline void audit_mq_notify(mqd_t mqdes, const struct sigevent *notification)
20ca73bc	247	{
5ac3a9c2	248	if (unlikely(!audit_dummy_context()))
20114f71	249	__audit_mq_notify(mqdes, notification);
20ca73bc	250	}
7392906e	251	static inline void audit_mq_getsetattr(mqd_t mqdes, struct mq_attr *mqstat)
20ca73bc	252	{
5ac3a9c2	253	if (unlikely(!audit_dummy_context()))
7392906e	254	__audit_mq_getsetattr(mqdes, mqstat);
20ca73bc	255	}
3fc689e9	256
d84f4f99 DH	257	static inline int audit_log_bprm_fcaps(struct linux_binprm *bprm,
	258	const struct cred *new,
	259	const struct cred *old)
3fc689e9 EP	260	{
3fc689e9 EP	261	if (unlikely(!audit_dummy_context()))
d84f4f99 DH	262	return __audit_log_bprm_fcaps(bprm, new, old);
d84f4f99 DH	263	return 0;
3fc689e9 EP	264	}
3fc689e9 EP	265
57f71a0a	266	static inline void audit_log_capset(pid_t pid, const struct cred *new,
d84f4f99	267	const struct cred *old)
e68b75a0 EP	268	{
e68b75a0 EP	269	if (unlikely(!audit_dummy_context()))
57f71a0a	270	__audit_log_capset(pid, new, old);
e68b75a0 EP	271	}
e68b75a0 EP	272
120a795d AV	273	static inline void audit_mmap_fd(int fd, int flags)
	274	{
	275	if (unlikely(!audit_dummy_context()))
	276	__audit_mmap_fd(fd, flags);
	277	}
	278
471a5c7c	279	extern int audit_n_rules;
e54dc243	280	extern int audit_signals;
d7e7528b	281	#else /* CONFIG_AUDITSYSCALL */
9321d526 KC	282	static inline int audit_alloc(struct task_struct *task)
	283	{
	284	return 0;
	285	}
	286	static inline void audit_free(struct task_struct *task)
	287	{ }
	288	static inline void audit_syscall_entry(int arch, int major, unsigned long a0,
	289	unsigned long a1, unsigned long a2,
	290	unsigned long a3)
	291	{ }
	292	static inline void audit_syscall_exit(void *pt_regs)
	293	{ }
	294	static inline int audit_dummy_context(void)
	295	{
	296	return 1;
	297	}
7ac86265 JL	298	static inline struct filename audit_reusename(const __user char name)
	299	{
	300	return NULL;
	301	}
91a27b2a	302	static inline void audit_getname(struct filename *name)
9321d526	303	{ }
91a27b2a	304	static inline void audit_putname(struct filename *name)
9321d526	305	{ }
adb5c247 JL	306	static inline void __audit_inode(struct filename *name,
adb5c247 JL	307	const struct dentry *dentry,
bfcec708	308	unsigned int parent)
9321d526	309	{ }
c43a25ab	310	static inline void __audit_inode_child(const struct inode *parent,
4fa6b5ec JL	311	const struct dentry *dentry,
4fa6b5ec JL	312	const unsigned char type)
9321d526	313	{ }
adb5c247 JL	314	static inline void audit_inode(struct filename *name,
adb5c247 JL	315	const struct dentry *dentry,
bfcec708	316	unsigned int parent)
9321d526	317	{ }
c43a25ab	318	static inline void audit_inode_child(const struct inode *parent,
4fa6b5ec JL	319	const struct dentry *dentry,
4fa6b5ec JL	320	const unsigned char type)
9321d526 KC	321	{ }
	322	static inline void audit_core_dumps(long signr)
	323	{ }
	324	static inline void __audit_seccomp(unsigned long syscall, long signr, int code)
	325	{ }
	326	static inline void audit_seccomp(unsigned long syscall, long signr, int code)
	327	{ }
	328	static inline int auditsc_get_stamp(struct audit_context *ctx,
	329	struct timespec t, unsigned int serial)
	330	{
	331	return 0;
	332	}
	333	static inline kuid_t audit_get_loginuid(struct task_struct *tsk)
	334	{
	335	return INVALID_UID;
	336	}
	337	static inline int audit_get_sessionid(struct task_struct *tsk)
	338	{
	339	return -1;
	340	}
	341	static inline void audit_log_task_context(struct audit_buffer *ab)
	342	{ }
	343	static inline void audit_log_task_info(struct audit_buffer *ab,
	344	struct task_struct *tsk)
	345	{ }
	346	static inline void audit_ipc_obj(struct kern_ipc_perm *ipcp)
	347	{ }
	348	static inline void audit_ipc_set_perm(unsigned long qbytes, uid_t uid,
	349	gid_t gid, umode_t mode)
	350	{ }
	351	static inline int audit_bprm(struct linux_binprm *bprm)
	352	{
	353	return 0;
	354	}
	355	static inline void audit_socketcall(int nargs, unsigned long *args)
	356	{ }
	357	static inline void audit_fd_pair(int fd1, int fd2)
	358	{ }
	359	static inline int audit_sockaddr(int len, void *addr)
	360	{
	361	return 0;
	362	}
	363	static inline void audit_mq_open(int oflag, umode_t mode, struct mq_attr *attr)
	364	{ }
	365	static inline void audit_mq_sendrecv(mqd_t mqdes, size_t msg_len,
	366	unsigned int msg_prio,
	367	const struct timespec *abs_timeout)
	368	{ }
	369	static inline void audit_mq_notify(mqd_t mqdes,
	370	const struct sigevent *notification)
	371	{ }
	372	static inline void audit_mq_getsetattr(mqd_t mqdes, struct mq_attr *mqstat)
	373	{ }
	374	static inline int audit_log_bprm_fcaps(struct linux_binprm *bprm,
	375	const struct cred *new,
	376	const struct cred *old)
	377	{
	378	return 0;
	379	}
	380	static inline void audit_log_capset(pid_t pid, const struct cred *new,
	381	const struct cred *old)
	382	{ }
	383	static inline void audit_mmap_fd(int fd, int flags)
	384	{ }
385	static inline void audit_ptrace(struct task_struct *t)
386	{ }
471a5c7c	387	#define audit_n_rules 0
e54dc243	388	#define audit_signals 0
d7e7528b	389	#endif /* CONFIG_AUDITSYSCALL */
1da177e4 LT	390
	391	#ifdef CONFIG_AUDIT
	392	/* These are defined in audit.c */
	393	/* Public API */
b9075fa9 JP	394	extern __printf(4, 5)
	395	void audit_log(struct audit_context *ctx, gfp_t gfp_mask, int type,
	396	const char *fmt, ...);
1da177e4	397
9796fdd8	398	extern struct audit_buffer audit_log_start(struct audit_context ctx, gfp_t gfp_mask, int type);
b9075fa9 JP	399	extern __printf(2, 3)
b9075fa9 JP	400	void audit_log_format(struct audit_buffer ab, const char fmt, ...);
1da177e4	401	extern void audit_log_end(struct audit_buffer *ab);
de6bbd1d EP	402	extern int audit_string_contains_control(const char *string,
de6bbd1d EP	403	size_t len);
b556f8ad EP	404	extern void audit_log_n_hex(struct audit_buffer *ab,
	405	const unsigned char *buf,
	406	size_t len);
	407	extern void audit_log_n_string(struct audit_buffer *ab,
	408	const char *buf,
	409	size_t n);
b556f8ad EP	410	extern void audit_log_n_untrustedstring(struct audit_buffer *ab,
	411	const char *string,
	412	size_t n);
de6bbd1d	413	extern void audit_log_untrustedstring(struct audit_buffer *ab,
83c7d091	414	const char *string);
1da177e4 LT	415	extern void audit_log_d_path(struct audit_buffer *ab,
1da177e4 LT	416	const char *prefix,
66b3fad3	417	const struct path *path);
9d960985 EP	418	extern void audit_log_key(struct audit_buffer *ab,
9d960985 EP	419	char *key);
a51d9eaa KC	420	extern void audit_log_link_denied(const char *operation,
a51d9eaa KC	421	struct path *link);
522ed776	422	extern void audit_log_lost(const char *message);
131ad62d MDF	423	#ifdef CONFIG_SECURITY
	424	extern void audit_log_secctx(struct audit_buffer *ab, u32 secid);
	425	#else
9321d526 KC	426	static inline void audit_log_secctx(struct audit_buffer *ab, u32 secid)
9321d526 KC	427	{ }
131ad62d MDF	428	#endif
131ad62d MDF	429
9d57a7f9 AD	430	extern int audit_update_lsm_rules(void);
9d57a7f9 AD	431
fe7752ba	432	/* Private API (for audit.c only) */
02276bda	433	extern int audit_filter_user(void);
fe7752ba	434	extern int audit_filter_type(int type);
017143fe	435	extern int audit_receive_filter(int type, int pid, int seq,
e1760bd5	436	void *data, size_t datasz, kuid_t loginuid,
2532386f	437	u32 sessionid, u32 sid);
522ed776	438	extern int audit_enabled;
9321d526 KC	439	#else /* CONFIG_AUDIT */
	440	static inline __printf(4, 5)
	441	void audit_log(struct audit_context *ctx, gfp_t gfp_mask, int type,
	442	const char *fmt, ...)
	443	{ }
	444	static inline struct audit_buffer audit_log_start(struct audit_context ctx,
	445	gfp_t gfp_mask, int type)
	446	{
	447	return NULL;
	448	}
	449	static inline __printf(2, 3)
	450	void audit_log_format(struct audit_buffer ab, const char fmt, ...)
	451	{ }
	452	static inline void audit_log_end(struct audit_buffer *ab)
	453	{ }
	454	static inline void audit_log_n_hex(struct audit_buffer *ab,
	455	const unsigned char *buf, size_t len)
	456	{ }
	457	static inline void audit_log_n_string(struct audit_buffer *ab,
	458	const char *buf, size_t n)
	459	{ }
	460	static inline void audit_log_n_untrustedstring(struct audit_buffer *ab,
	461	const char *string, size_t n)
	462	{ }
	463	static inline void audit_log_untrustedstring(struct audit_buffer *ab,
	464	const char *string)
	465	{ }
	466	static inline void audit_log_d_path(struct audit_buffer *ab,
	467	const char *prefix,
	468	const struct path *path)
	469	{ }
	470	static inline void audit_log_key(struct audit_buffer ab, char key)
	471	{ }
	472	static inline void audit_log_link_denied(const char *string,
	473	const struct path *link)
	474	{ }
	475	static inline void audit_log_secctx(struct audit_buffer *ab, u32 secid)
	476	{ }
522ed776	477	#define audit_enabled 0
9321d526 KC	478	#endif /* CONFIG_AUDIT */
	479	static inline void audit_log_string(struct audit_buffer ab, const char buf)
	480	{
	481	audit_log_n_string(ab, buf, strlen(buf));
	482	}
	483
1da177e4	484	#endif