[GitHub/mt8127/android_kernel_alcatel_ttab.git] / security / integrity / ima / ima_audit.c

/*
 * Copyright (C) 2008 IBM Corporation
 * Author: Mimi Zohar <zohar@us.ibm.com>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, version 2 of the License.
 *
 * File: integrity_audit.c
 * 	Audit calls for the integrity subsystem
 */

#include <linux/fs.h>
#include <linux/gfp.h>
#include <linux/audit.h>
#include "ima.h"

static int ima_audit;

#ifdef CONFIG_IMA_AUDIT

/* ima_audit_setup - enable informational auditing messages */
static int __init ima_audit_setup(char *str)
{
	unsigned long audit;

	if (!strict_strtoul(str, 0, &audit))
		ima_audit = audit ? 1 : 0;
	return 1;
}
__setup("ima_audit=", ima_audit_setup);
#endif

void integrity_audit_msg(int audit_msgno, struct inode *inode,
			 const unsigned char *fname, const char *op,
			 const char *cause, int result, int audit_info)
{
	struct audit_buffer *ab;

	if (!ima_audit && audit_info == 1) /* Skip informational messages */
		return;

	ab = audit_log_start(current->audit_context, GFP_KERNEL, audit_msgno);
	audit_log_format(ab, "pid=%d uid=%u auid=%u ses=%u",
			 current->pid, current_cred()->uid,
			 audit_get_loginuid(current),
			 audit_get_sessionid(current));
	audit_log_task_context(ab);
	audit_log_format(ab, " op=");
	audit_log_string(ab, op);
	audit_log_format(ab, " cause=");
	audit_log_string(ab, cause);
	audit_log_format(ab, " comm=");
	audit_log_untrustedstring(ab, current->comm);
	if (fname) {
		audit_log_format(ab, " name=");
		audit_log_untrustedstring(ab, fname);
	}
	if (inode)
		audit_log_format(ab, " dev=%s ino=%lu",
				 inode->i_sb->s_id, inode->i_ino);
	audit_log_format(ab, " res=%d", !result ? 0 : 1);
	audit_log_end(ab);
}
Commit	Line	Data
3323eec9 MZ	1	/*
	2	* Copyright (C) 2008 IBM Corporation
	3	* Author: Mimi Zohar <zohar@us.ibm.com>
	4	*
	5	* This program is free software; you can redistribute it and/or modify
	6	* it under the terms of the GNU General Public License as published by
	7	* the Free Software Foundation, version 2 of the License.
	8	*
	9	* File: integrity_audit.c
	10	* Audit calls for the integrity subsystem
	11	*/
	12
	13	#include <linux/fs.h>
5a0e3ad6	14	#include <linux/gfp.h>
3323eec9 MZ	15	#include <linux/audit.h>
	16	#include "ima.h"
	17
	18	static int ima_audit;
	19
	20	#ifdef CONFIG_IMA_AUDIT
	21
	22	/* ima_audit_setup - enable informational auditing messages */
	23	static int __init ima_audit_setup(char *str)
	24	{
	25	unsigned long audit;
3323eec9	26
07ff7a0b MZ	27	if (!strict_strtoul(str, 0, &audit))
07ff7a0b MZ	28	ima_audit = audit ? 1 : 0;
3323eec9 MZ	29	return 1;
	30	}
	31	__setup("ima_audit=", ima_audit_setup);
	32	#endif
	33
	34	void integrity_audit_msg(int audit_msgno, struct inode *inode,
	35	const unsigned char fname, const char op,
	36	const char *cause, int result, int audit_info)
	37	{
	38	struct audit_buffer *ab;
	39
	40	if (!ima_audit && audit_info == 1) /* Skip informational messages */
	41	return;
	42
	43	ab = audit_log_start(current->audit_context, GFP_KERNEL, audit_msgno);
34c111f6	44	audit_log_format(ab, "pid=%d uid=%u auid=%u ses=%u",
37bcbf13	45	current->pid, current_cred()->uid,
523979ad MZ	46	audit_get_loginuid(current),
523979ad MZ	47	audit_get_sessionid(current));
3323eec9	48	audit_log_task_context(ab);
e5e520a7 MZ	49	audit_log_format(ab, " op=");
	50	audit_log_string(ab, op);
	51	audit_log_format(ab, " cause=");
	52	audit_log_string(ab, cause);
3323eec9 MZ	53	audit_log_format(ab, " comm=");
	54	audit_log_untrustedstring(ab, current->comm);
	55	if (fname) {
	56	audit_log_format(ab, " name=");
	57	audit_log_untrustedstring(ab, fname);
	58	}
	59	if (inode)
	60	audit_log_format(ab, " dev=%s ino=%lu",
	61	inode->i_sb->s_id, inode->i_ino);
523979ad	62	audit_log_format(ab, " res=%d", !result ? 0 : 1);
3323eec9 MZ	63	audit_log_end(ab);
3323eec9 MZ	64	}