integrity/ima/ima_policy.c

1159 static void ima_log_string_op(struct audit_buffer *ab, char *key, char *value,
1162 	if (!ab)
1172 		audit_log_format(ab, "%s>", key);
1180 		audit_log_format(ab, "%s<", key);
1183 		audit_log_format(ab, "%s=", key);
1185 	audit_log_format(ab, "%s ", value);
1187 static void ima_log_string(struct audit_buffer *ab, char *key, char *value)
1189 	ima_log_string_op(ab, key, value, Opt_err);
1406 	struct audit_buffer *ab;
1413 	ab = integrity_audit_log_start(audit_context(), GFP_KERNEL,
1437 			ima_log_string(ab, "action", "measure");
1445 			ima_log_string(ab, "action", "dont_measure");
1453 			ima_log_string(ab, "action", "appraise");
1461 			ima_log_string(ab, "action", "dont_appraise");
1469 			ima_log_string(ab, "action", "audit");
1477 			ima_log_string(ab, "action", "hash");
1485 			ima_log_string(ab, "action", "dont_hash");
1493 			ima_log_string(ab, "func", args[0].from);
1539 			ima_log_string(ab, "mask", args[0].from);
1563 			ima_log_string(ab, "fsmagic", args[0].from);
1575 			ima_log_string(ab, "fsname", args[0].from);
1586 			ima_log_string(ab, "keyrings", args[0].from);
1604 			ima_log_string(ab, "label", args[0].from);
1621 			ima_log_string(ab, "fsuuid", args[0].from);
1647 			ima_log_string_op(ab, eid_token ? "euid" : "uid",
1682 			ima_log_string_op(ab, eid_token ? "egid" : "gid",
1710 			ima_log_string_op(ab, "fowner", args[0].from, token);
1736 			ima_log_string_op(ab, "fgroup", args[0].from, token);
1755 			ima_log_string(ab, "obj_user", args[0].from);
1761 			ima_log_string(ab, "obj_role", args[0].from);
1767 			ima_log_string(ab, "obj_type", args[0].from);
1773 			ima_log_string(ab, "subj_user", args[0].from);
1779 			ima_log_string(ab, "subj_role", args[0].from);
1785 			ima_log_string(ab, "subj_type", args[0].from);
1791 			ima_log_string(ab, "digest_type", args[0].from);
1800 			ima_log_string(ab, "appraise_type", args[0].from);
1825 			ima_log_string(ab, "appraise_flag", args[0].from);
1828 			ima_log_string(ab, "appraise_algos", args[0].from);
1850 			ima_log_string(ab, "pcr", args[0].from);
1860 			ima_log_string(ab, "template", args[0].from);
1882 			ima_log_string(ab, "UNKNOWN", p);
1907 	audit_log_format(ab, "res=%d", !result);
1908 	audit_log_end(ab);