xref: /linux/lib/audit.c (revision 6fdcba32711044c35c0e1b094cbd8f3f0b4472c9)
1 // SPDX-License-Identifier: GPL-2.0
2 #include <linux/init.h>
3 #include <linux/types.h>
4 #include <linux/audit.h>
5 #include <asm/unistd.h>
6 
7 static unsigned dir_class[] = {
8 #include <asm-generic/audit_dir_write.h>
9 ~0U
10 };
11 
12 static unsigned read_class[] = {
13 #include <asm-generic/audit_read.h>
14 ~0U
15 };
16 
17 static unsigned write_class[] = {
18 #include <asm-generic/audit_write.h>
19 ~0U
20 };
21 
22 static unsigned chattr_class[] = {
23 #include <asm-generic/audit_change_attr.h>
24 ~0U
25 };
26 
27 static unsigned signal_class[] = {
28 #include <asm-generic/audit_signal.h>
29 ~0U
30 };
31 
32 int audit_classify_arch(int arch)
33 {
34 	if (audit_is_compat(arch))
35 		return 1;
36 	else
37 		return 0;
38 }
39 
40 int audit_classify_syscall(int abi, unsigned syscall)
41 {
42 	if (audit_is_compat(abi))
43 		return audit_classify_compat_syscall(abi, syscall);
44 
45 	switch(syscall) {
46 #ifdef __NR_open
47 	case __NR_open:
48 		return 2;
49 #endif
50 #ifdef __NR_openat
51 	case __NR_openat:
52 		return 3;
53 #endif
54 #ifdef __NR_socketcall
55 	case __NR_socketcall:
56 		return 4;
57 #endif
58 #ifdef __NR_execveat
59 	case __NR_execveat:
60 #endif
61 	case __NR_execve:
62 		return 5;
63 	default:
64 		return 0;
65 	}
66 }
67 
68 static int __init audit_classes_init(void)
69 {
70 #ifdef CONFIG_AUDIT_COMPAT_GENERIC
71 	audit_register_class(AUDIT_CLASS_WRITE_32, compat_write_class);
72 	audit_register_class(AUDIT_CLASS_READ_32, compat_read_class);
73 	audit_register_class(AUDIT_CLASS_DIR_WRITE_32, compat_dir_class);
74 	audit_register_class(AUDIT_CLASS_CHATTR_32, compat_chattr_class);
75 	audit_register_class(AUDIT_CLASS_SIGNAL_32, compat_signal_class);
76 #endif
77 	audit_register_class(AUDIT_CLASS_WRITE, write_class);
78 	audit_register_class(AUDIT_CLASS_READ, read_class);
79 	audit_register_class(AUDIT_CLASS_DIR_WRITE, dir_class);
80 	audit_register_class(AUDIT_CLASS_CHATTR, chattr_class);
81 	audit_register_class(AUDIT_CLASS_SIGNAL, signal_class);
82 	return 0;
83 }
84 
85 __initcall(audit_classes_init);
86