231 static void __ad_net_init(struct common_audit_data *ad,  in __ad_net_init()  argument
235 	ad->type = LSM_AUDIT_DATA_NET;  in __ad_net_init()
236 	ad->u.net = net;  in __ad_net_init()
242 static void ad_net_init_from_sk(struct common_audit_data *ad,  in ad_net_init_from_sk()  argument
246 	__ad_net_init(ad, net, 0, sk, 0);  in ad_net_init_from_sk()
249 static void ad_net_init_from_iif(struct common_audit_data *ad,  in ad_net_init_from_iif()  argument
253 	__ad_net_init(ad, net, ifindex, NULL, family);  in ad_net_init_from_iif()
1627 	struct common_audit_data ad;  in cred_has_capability()  local
1634 	ad.type = LSM_AUDIT_DATA_CAP;  in cred_has_capability()
1635 	ad.u.cap = cap;  in cred_has_capability()
1652 		int rc2 = avc_audit(sid, sid, sclass, av, &avd, rc, &ad);  in cred_has_capability()
1687 	struct common_audit_data ad;  in dentry_has_perm()  local
1689 	ad.type = LSM_AUDIT_DATA_DENTRY;  in dentry_has_perm()
1690 	ad.u.dentry = dentry;  in dentry_has_perm()
1692 	return inode_has_perm(cred, inode, av, &ad);  in dentry_has_perm()
1703 	struct common_audit_data ad;  in path_has_perm()  local
1705 	ad.type = LSM_AUDIT_DATA_PATH;  in path_has_perm()
1706 	ad.u.path = *path;  in path_has_perm()
1708 	return inode_has_perm(cred, inode, av, &ad);  in path_has_perm()
1716 	struct common_audit_data ad;  in file_path_has_perm()  local
1718 	ad.type = LSM_AUDIT_DATA_FILE;  in file_path_has_perm()
1719 	ad.u.file = file;  in file_path_has_perm()
1720 	return inode_has_perm(cred, file_inode(file), av, &ad);  in file_path_has_perm()
1741 	struct common_audit_data ad;  in file_has_perm()  local
1745 	ad.type = LSM_AUDIT_DATA_FILE;  in file_has_perm()
1746 	ad.u.file = file;  in file_has_perm()
1752 				  &ad);  in file_has_perm()
1766 		rc = inode_has_perm(cred, inode, av, &ad);  in file_has_perm()
1809 	struct common_audit_data ad;  in may_create()  local
1817 	ad.type = LSM_AUDIT_DATA_DENTRY;  in may_create()
1818 	ad.u.dentry = dentry;  in may_create()
1822 			  &ad);  in may_create()
1831 	rc = avc_has_perm(sid, newsid, tclass, FILE__CREATE, &ad);  in may_create()
1837 			    FILESYSTEM__ASSOCIATE, &ad);  in may_create()
1851 	struct common_audit_data ad;  in may_link()  local
1859 	ad.type = LSM_AUDIT_DATA_DENTRY;  in may_link()
1860 	ad.u.dentry = dentry;  in may_link()
1864 	rc = avc_has_perm(sid, dsec->sid, SECCLASS_DIR, av, &ad);  in may_link()
1884 	rc = avc_has_perm(sid, isec->sid, isec->sclass, av, &ad);  in may_link()
1894 	struct common_audit_data ad;  in may_rename()  local
1905 	ad.type = LSM_AUDIT_DATA_DENTRY;  in may_rename()
1907 	ad.u.dentry = old_dentry;  in may_rename()
1909 			  DIR__REMOVE_NAME | DIR__SEARCH, &ad);  in may_rename()
1913 			  old_isec->sclass, FILE__RENAME, &ad);  in may_rename()
1918 				  old_isec->sclass, DIR__REPARENT, &ad);  in may_rename()
1923 	ad.u.dentry = new_dentry;  in may_rename()
1927 	rc = avc_has_perm(sid, new_dsec->sid, SECCLASS_DIR, av, &ad);  in may_rename()
1935 				  (new_is_dir ? DIR__RMDIR : FILE__UNLINK), &ad);  in may_rename()
1947 			       struct common_audit_data *ad)  in superblock_has_perm()  argument
1953 	return avc_has_perm(sid, sbsec->sid, SECCLASS_FILESYSTEM, perms, ad);  in superblock_has_perm()
2066 	struct common_audit_data ad;  in selinux_binder_transfer_file()  local
2069 	ad.type = LSM_AUDIT_DATA_PATH;  in selinux_binder_transfer_file()
2070 	ad.u.path = file->f_path;  in selinux_binder_transfer_file()
2076 				  &ad);  in selinux_binder_transfer_file()
2092 			    &ad);  in selinux_binder_transfer_file()
2296 	struct common_audit_data ad;  in selinux_bprm_creds_for_exec()  local
2355 	ad.type = LSM_AUDIT_DATA_FILE;  in selinux_bprm_creds_for_exec()
2356 	ad.u.file = bprm->file;  in selinux_bprm_creds_for_exec()
2360 				  SECCLASS_FILE, FILE__EXECUTE_NO_TRANS, &ad);  in selinux_bprm_creds_for_exec()
2366 				  SECCLASS_PROCESS, PROCESS__TRANSITION, &ad);  in selinux_bprm_creds_for_exec()
2371 				  SECCLASS_FILE, FILE__ENTRYPOINT, &ad);  in selinux_bprm_creds_for_exec()
2738 	struct common_audit_data ad;  in selinux_sb_kern_mount()  local
2740 	ad.type = LSM_AUDIT_DATA_DENTRY;  in selinux_sb_kern_mount()
2741 	ad.u.dentry = sb->s_root;  in selinux_sb_kern_mount()
2742 	return superblock_has_perm(cred, sb, FILESYSTEM__MOUNT, &ad);  in selinux_sb_kern_mount()
2748 	struct common_audit_data ad;  in selinux_sb_statfs()  local
2750 	ad.type = LSM_AUDIT_DATA_DENTRY;  in selinux_sb_statfs()
2751 	ad.u.dentry = dentry->d_sb->s_root;  in selinux_sb_statfs()
2752 	return superblock_has_perm(cred, dentry->d_sb, FILESYSTEM__GETATTR, &ad);  in selinux_sb_statfs()
2963 	struct common_audit_data ad;  in selinux_inode_init_security_anon()  local
3003 	ad.type = LSM_AUDIT_DATA_ANONINODE;  in selinux_inode_init_security_anon()
3004 	ad.u.anonclass = name ? (const char *)name->name : "?";  in selinux_inode_init_security_anon()
3010 			    &ad);  in selinux_inode_init_security_anon()
3064 	struct common_audit_data ad;  in selinux_inode_follow_link()  local
3068 	ad.type = LSM_AUDIT_DATA_DENTRY;  in selinux_inode_follow_link()
3069 	ad.u.dentry = dentry;  in selinux_inode_follow_link()
3074 	return avc_has_perm(sid, isec->sid, isec->sclass, FILE__READ, &ad);  in selinux_inode_follow_link()
3081 	struct common_audit_data ad;  in audit_inode_permission()  local
3084 	ad.type = LSM_AUDIT_DATA_INODE;  in audit_inode_permission()
3085 	ad.u.inode = inode;  in audit_inode_permission()
3088 			    audited, denied, result, &ad);  in audit_inode_permission()
3202 	struct common_audit_data ad;  in selinux_inode_setxattr()  local
3220 	ad.type = LSM_AUDIT_DATA_DENTRY;  in selinux_inode_setxattr()
3221 	ad.u.dentry = dentry;  in selinux_inode_setxattr()
3225 			  FILE__RELABELFROM, &ad);  in selinux_inode_setxattr()
3265 			  FILE__RELABELTO, &ad);  in selinux_inode_setxattr()
3278 			    &ad);  in selinux_inode_setxattr()
3375 	struct common_audit_data ad;  in selinux_path_notify()  local
3377 	ad.type = LSM_AUDIT_DATA_PATH;  in selinux_path_notify()
3378 	ad.u.path = *path;  in selinux_path_notify()
3391 						FILESYSTEM__WATCH, &ad);  in selinux_path_notify()
3664 	struct common_audit_data ad;  in ioctl_has_perm()  local
3674 	ad.type = LSM_AUDIT_DATA_IOCTL_OP;  in ioctl_has_perm()
3675 	ad.u.op = &ioctl;  in ioctl_has_perm()
3676 	ad.u.op->cmd = cmd;  in ioctl_has_perm()
3677 	ad.u.op->path = file->f_path;  in ioctl_has_perm()
3683 				&ad);  in ioctl_has_perm()
3693 				    driver, AVC_EXT_IOCTL, xperm, &ad);  in ioctl_has_perm()
3829 	struct common_audit_data ad;  in selinux_mmap_file()  local
3833 		ad.type = LSM_AUDIT_DATA_FILE;  in selinux_mmap_file()
3834 		ad.u.file = file;  in selinux_mmap_file()
3836 				    FILE__MAP, &ad);  in selinux_mmap_file()
4090 	struct common_audit_data ad;  in selinux_kernel_module_request()  local
4092 	ad.type = LSM_AUDIT_DATA_KMOD;  in selinux_kernel_module_request()
4093 	ad.u.kmod_name = kmod_name;  in selinux_kernel_module_request()
4096 			    SYSTEM__MODULE_REQUEST, &ad);  in selinux_kernel_module_request()
4101 	struct common_audit_data ad;  in selinux_kernel_module_from_file()  local
4114 	ad.type = LSM_AUDIT_DATA_FILE;  in selinux_kernel_module_from_file()
4115 	ad.u.file = file;  in selinux_kernel_module_from_file()
4119 		rc = avc_has_perm(sid, fsec->sid, SECCLASS_FD, FD__USE, &ad);  in selinux_kernel_module_from_file()
4126 				SYSTEM__MODULE_LOAD, &ad);  in selinux_kernel_module_from_file()
4297 			struct common_audit_data *ad, u8 *proto)  in selinux_parse_skb_ipv4()  argument
4311 	ad->u.net->v4info.saddr = ih->saddr;  in selinux_parse_skb_ipv4()
4312 	ad->u.net->v4info.daddr = ih->daddr;  in selinux_parse_skb_ipv4()
4330 		ad->u.net->sport = th->source;  in selinux_parse_skb_ipv4()
4331 		ad->u.net->dport = th->dest;  in selinux_parse_skb_ipv4()
4346 		ad->u.net->sport = uh->source;  in selinux_parse_skb_ipv4()
4347 		ad->u.net->dport = uh->dest;  in selinux_parse_skb_ipv4()
4362 		ad->u.net->sport = dh->dccph_sport;  in selinux_parse_skb_ipv4()
4363 		ad->u.net->dport = dh->dccph_dport;  in selinux_parse_skb_ipv4()
4379 		ad->u.net->sport = sh->source;  in selinux_parse_skb_ipv4()
4380 		ad->u.net->dport = sh->dest;  in selinux_parse_skb_ipv4()
4395 			struct common_audit_data *ad, u8 *proto)  in selinux_parse_skb_ipv6()  argument
4407 	ad->u.net->v6info.saddr = ip6->saddr;  in selinux_parse_skb_ipv6()
4408 	ad->u.net->v6info.daddr = ip6->daddr;  in selinux_parse_skb_ipv6()
4428 		ad->u.net->sport = th->source;  in selinux_parse_skb_ipv6()
4429 		ad->u.net->dport = th->dest;  in selinux_parse_skb_ipv6()
4440 		ad->u.net->sport = uh->source;  in selinux_parse_skb_ipv6()
4441 		ad->u.net->dport = uh->dest;  in selinux_parse_skb_ipv6()
4452 		ad->u.net->sport = dh->dccph_sport;  in selinux_parse_skb_ipv6()
4453 		ad->u.net->dport = dh->dccph_dport;  in selinux_parse_skb_ipv6()
4465 		ad->u.net->sport = sh->source;  in selinux_parse_skb_ipv6()
4466 		ad->u.net->dport = sh->dest;  in selinux_parse_skb_ipv6()
4480 static int selinux_parse_skb(struct sk_buff *skb, struct common_audit_data *ad,  in selinux_parse_skb()  argument
4486 	switch (ad->u.net->family) {  in selinux_parse_skb()
4488 		ret = selinux_parse_skb_ipv4(skb, ad, proto);  in selinux_parse_skb()
4491 		addrp = (char *)(src ? &ad->u.net->v4info.saddr :  in selinux_parse_skb()
4492 				       &ad->u.net->v4info.daddr);  in selinux_parse_skb()
4497 		ret = selinux_parse_skb_ipv6(skb, ad, proto);  in selinux_parse_skb()
4500 		addrp = (char *)(src ? &ad->u.net->v6info.saddr :  in selinux_parse_skb()
4501 				       &ad->u.net->v6info.daddr);  in selinux_parse_skb()
4627 	struct common_audit_data ad;  in sock_has_perm()  local
4633 	ad_net_init_from_sk(&ad, &net, sk);  in sock_has_perm()
4636 			    &ad);  in sock_has_perm()
4723 		struct common_audit_data ad;  in selinux_socket_bind()  local
4775 		ad.type = LSM_AUDIT_DATA_NET;  in selinux_socket_bind()
4776 		ad.u.net = &net;  in selinux_socket_bind()
4777 		ad.u.net->sport = htons(snum);  in selinux_socket_bind()
4778 		ad.u.net->family = family_sa;  in selinux_socket_bind()
4793 						   SOCKET__NAME_BIND, &ad);  in selinux_socket_bind()
4826 			ad.u.net->v4info.saddr = addr4->sin_addr.s_addr;  in selinux_socket_bind()
4828 			ad.u.net->v6info.saddr = addr6->sin6_addr;  in selinux_socket_bind()
4831 				   sksec->sclass, node_perm, &ad);  in selinux_socket_bind()
4873 		struct common_audit_data ad;  in selinux_socket_connect_helper()  local
4924 		ad.type = LSM_AUDIT_DATA_NET;  in selinux_socket_connect_helper()
4925 		ad.u.net = &net;  in selinux_socket_connect_helper()
4926 		ad.u.net->dport = htons(snum);  in selinux_socket_connect_helper()
4927 		ad.u.net->family = address->sa_family;  in selinux_socket_connect_helper()
4928 		err = avc_has_perm(sksec->sid, sid, sksec->sclass, perm, &ad);  in selinux_socket_connect_helper()
5032 	struct common_audit_data ad;  in selinux_socket_unix_stream_connect()  local
5036 	ad_net_init_from_sk(&ad, &net, other);  in selinux_socket_unix_stream_connect()
5040 			   UNIX_STREAM_SOCKET__CONNECTTO, &ad);  in selinux_socket_unix_stream_connect()
5062 	struct common_audit_data ad;  in selinux_socket_unix_may_send()  local
5065 	ad_net_init_from_sk(&ad, &net, other->sk);  in selinux_socket_unix_may_send()
5068 			    &ad);  in selinux_socket_unix_may_send()
5073 				    struct common_audit_data *ad)  in selinux_inet_sys_rcv_skb()  argument
5083 			   SECCLASS_NETIF, NETIF__INGRESS, ad);  in selinux_inet_sys_rcv_skb()
5091 			    SECCLASS_NODE, NODE__RECVFROM, ad);  in selinux_inet_sys_rcv_skb()
5100 	struct common_audit_data ad;  in selinux_sock_rcv_skb_compat()  local
5104 	ad_net_init_from_iif(&ad, &net, skb->skb_iif, family);  in selinux_sock_rcv_skb_compat()
5105 	err = selinux_parse_skb(skb, &ad, &addrp, 1, NULL);  in selinux_sock_rcv_skb_compat()
5111 				   PACKET__RECV, &ad);  in selinux_sock_rcv_skb_compat()
5116 	err = selinux_netlbl_sock_rcv_skb(sksec, skb, family, &ad);  in selinux_sock_rcv_skb_compat()
5119 	err = selinux_xfrm_sock_rcv_skb(sksec->sid, skb, &ad);  in selinux_sock_rcv_skb_compat()
5130 	struct common_audit_data ad;  in selinux_socket_sock_rcv_skb()  local
5153 	ad_net_init_from_iif(&ad, &net, skb->skb_iif, family);  in selinux_socket_sock_rcv_skb()
5154 	err = selinux_parse_skb(skb, &ad, &addrp, 1, NULL);  in selinux_socket_sock_rcv_skb()
5165 					       addrp, family, peer_sid, &ad);  in selinux_socket_sock_rcv_skb()
5171 				   PEER__RECV, &ad);  in selinux_socket_sock_rcv_skb()
5180 				   PACKET__RECV, &ad);  in selinux_socket_sock_rcv_skb()
5317 	struct common_audit_data ad;  in selinux_sctp_process_new_assoc()  local
5354 		ad_net_init_from_sk(&ad, &net, asoc->base.sk);  in selinux_sctp_process_new_assoc()
5357 				   &ad);  in selinux_sctp_process_new_assoc()
5682 	struct common_audit_data ad;  in selinux_ip_forward()  local
5699 	ad_net_init_from_iif(&ad, &net, ifindex, family);  in selinux_ip_forward()
5700 	if (selinux_parse_skb(skb, &ad, &addrp, 1, NULL) != 0)  in selinux_ip_forward()
5707 					       addrp, family, peer_sid, &ad);  in selinux_ip_forward()
5716 				 SECCLASS_PACKET, PACKET__FORWARD_IN, &ad))  in selinux_ip_forward()
5778 	struct common_audit_data ad;  in selinux_ip_postroute_compat()  local
5787 	ad_net_init_from_iif(&ad, &net, state->out->ifindex, state->pf);  in selinux_ip_postroute_compat()
5788 	if (selinux_parse_skb(skb, &ad, NULL, 0, &proto))  in selinux_ip_postroute_compat()
5793 				 SECCLASS_PACKET, PACKET__SEND, &ad))  in selinux_ip_postroute_compat()
5796 	if (selinux_xfrm_postroute_last(sksec->sid, skb, &ad, proto))  in selinux_ip_postroute_compat()
5811 	struct common_audit_data ad;  in selinux_ip_postroute()  local
5909 	ad_net_init_from_iif(&ad, &net, ifindex, family);  in selinux_ip_postroute()
5910 	if (selinux_parse_skb(skb, &ad, &addrp, 0, NULL))  in selinux_ip_postroute()
5915 				 SECCLASS_PACKET, secmark_perm, &ad))  in selinux_ip_postroute()
5925 				 SECCLASS_NETIF, NETIF__EGRESS, &ad))  in selinux_ip_postroute()
5931 				 SECCLASS_NODE, NODE__SENDTO, &ad))  in selinux_ip_postroute()
5942 	struct common_audit_data ad;  in nlmsg_sock_has_extended_perms()  local
5949 	ad.type = LSM_AUDIT_DATA_NLMSGTYPE;  in nlmsg_sock_has_extended_perms()
5950 	ad.u.nlmsg_type = nlmsg_type;  in nlmsg_sock_has_extended_perms()
5956 				      perms, driver, AVC_EXT_NLMSG, xperm, &ad);  in nlmsg_sock_has_extended_perms()
6032 	struct common_audit_data ad;  in ipc_has_perm()  local
6037 	ad.type = LSM_AUDIT_DATA_IPC;  in ipc_has_perm()
6038 	ad.u.ipc_id = ipc_perms->key;  in ipc_has_perm()
6040 	return avc_has_perm(sid, isec->sid, isec->sclass, perms, &ad);  in ipc_has_perm()
6057 	struct common_audit_data ad;  in selinux_msg_queue_alloc_security()  local
6063 	ad.type = LSM_AUDIT_DATA_IPC;  in selinux_msg_queue_alloc_security()
6064 	ad.u.ipc_id = msq->key;  in selinux_msg_queue_alloc_security()
6067 			    MSGQ__CREATE, &ad);  in selinux_msg_queue_alloc_security()
6073 	struct common_audit_data ad;  in selinux_msg_queue_associate()  local
6078 	ad.type = LSM_AUDIT_DATA_IPC;  in selinux_msg_queue_associate()
6079 	ad.u.ipc_id = msq->key;  in selinux_msg_queue_associate()
6082 			    MSGQ__ASSOCIATE, &ad);  in selinux_msg_queue_associate()
6117 	struct common_audit_data ad;  in selinux_msg_queue_msgsnd()  local
6138 	ad.type = LSM_AUDIT_DATA_IPC;  in selinux_msg_queue_msgsnd()
6139 	ad.u.ipc_id = msq->key;  in selinux_msg_queue_msgsnd()
6143 			  MSGQ__WRITE, &ad);  in selinux_msg_queue_msgsnd()
6147 				  MSG__SEND, &ad);  in selinux_msg_queue_msgsnd()
6151 				  MSGQ__ENQUEUE, &ad);  in selinux_msg_queue_msgsnd()
6162 	struct common_audit_data ad;  in selinux_msg_queue_msgrcv()  local
6169 	ad.type = LSM_AUDIT_DATA_IPC;  in selinux_msg_queue_msgrcv()
6170 	ad.u.ipc_id = msq->key;  in selinux_msg_queue_msgrcv()
6173 			  SECCLASS_MSGQ, MSGQ__READ, &ad);  in selinux_msg_queue_msgrcv()
6176 				  SECCLASS_MSG, MSG__RECEIVE, &ad);  in selinux_msg_queue_msgrcv()
6184 	struct common_audit_data ad;  in selinux_shm_alloc_security()  local
6190 	ad.type = LSM_AUDIT_DATA_IPC;  in selinux_shm_alloc_security()
6191 	ad.u.ipc_id = shp->key;  in selinux_shm_alloc_security()
6194 			    SHM__CREATE, &ad);  in selinux_shm_alloc_security()
6200 	struct common_audit_data ad;  in selinux_shm_associate()  local
6205 	ad.type = LSM_AUDIT_DATA_IPC;  in selinux_shm_associate()
6206 	ad.u.ipc_id = shp->key;  in selinux_shm_associate()
6209 			    SHM__ASSOCIATE, &ad);  in selinux_shm_associate()
6262 	struct common_audit_data ad;  in selinux_sem_alloc_security()  local
6268 	ad.type = LSM_AUDIT_DATA_IPC;  in selinux_sem_alloc_security()
6269 	ad.u.ipc_id = sma->key;  in selinux_sem_alloc_security()
6272 			    SEM__CREATE, &ad);  in selinux_sem_alloc_security()
6278 	struct common_audit_data ad;  in selinux_sem_associate()  local
6283 	ad.type = LSM_AUDIT_DATA_IPC;  in selinux_sem_associate()
6284 	ad.u.ipc_id = sma->key;  in selinux_sem_associate()
6287 			    SEM__ASSOCIATE, &ad);  in selinux_sem_associate()
6815 	struct common_audit_data ad;  in selinux_ib_pkey_access()  local
6825 	ad.type = LSM_AUDIT_DATA_IBPKEY;  in selinux_ib_pkey_access()
6828 	ad.u.ibpkey = &ibpkey;  in selinux_ib_pkey_access()
6831 			    INFINIBAND_PKEY__ACCESS, &ad);  in selinux_ib_pkey_access()
6837 	struct common_audit_data ad;  in selinux_ib_endport_manage_subnet()  local
6849 	ad.type = LSM_AUDIT_DATA_IBENDPORT;  in selinux_ib_endport_manage_subnet()
6852 	ad.u.ibendport = &ibendport;  in selinux_ib_endport_manage_subnet()
6855 			    INFINIBAND_ENDPORT__MANAGE_SUBNET, &ad);  in selinux_ib_endport_manage_subnet()
7132 	struct common_audit_data ad;  in selinux_uring_cmd()  local
7134 	ad.type = LSM_AUDIT_DATA_FILE;  in selinux_uring_cmd()
7135 	ad.u.file = file;  in selinux_uring_cmd()
7138 			    SECCLASS_IO_URING, IO_URING__CMD, &ad);  in selinux_uring_cmd()