linux-master/security/lsm_audit.c

172 static inline void print_ipv6_addr(struct audit_buffer *ab,
177 		audit_log_format(ab, " %s=%pI6c", name1, addr);
179 		audit_log_format(ab, " %s=%d", name2, ntohs(port));
182 static inline void print_ipv4_addr(struct audit_buffer *ab, __be32 addr,
186 		audit_log_format(ab, " %s=%pI4", name1, &addr);
188 		audit_log_format(ab, " %s=%d", name2, ntohs(port));
193  * @ab : the audit buffer
197 static void dump_common_audit_data(struct audit_buffer *ab,
209 	audit_log_format(ab, " pid=%d comm=", task_tgid_nr(current));
210 	audit_log_untrustedstring(ab, memcpy(comm, current->comm, sizeof(comm)));
216 		audit_log_format(ab, " ipc_key=%d ", a->u.ipc_id);
219 		audit_log_format(ab, " capability=%d ", a->u.cap);
224 		audit_log_d_path(ab, " path=", &a->u.path);
228 			audit_log_format(ab, " dev=");
229 			audit_log_untrustedstring(ab, inode->i_sb->s_id);
230 			audit_log_format(ab, " ino=%lu", inode->i_ino);
237 		audit_log_d_path(ab, " path=", &a->u.file->f_path);
241 			audit_log_format(ab, " dev=");
242 			audit_log_untrustedstring(ab, inode->i_sb->s_id);
243 			audit_log_format(ab, " ino=%lu", inode->i_ino);
250 		audit_log_d_path(ab, " path=", &a->u.op->path);
254 			audit_log_format(ab, " dev=");
255 			audit_log_untrustedstring(ab, inode->i_sb->s_id);
256 			audit_log_format(ab, " ino=%lu", inode->i_ino);
259 		audit_log_format(ab, " ioctlcmd=0x%hx", a->u.op->cmd);
265 		audit_log_format(ab, " name=");
267 		audit_log_untrustedstring(ab, a->u.dentry->d_name.name);
272 			audit_log_format(ab, " dev=");
273 			audit_log_untrustedstring(ab, inode->i_sb->s_id);
274 			audit_log_format(ab, " ino=%lu", inode->i_ino);
286 			audit_log_format(ab, " name=");
288 			audit_log_untrustedstring(ab, dentry->d_name.name);
291 		audit_log_format(ab, " dev=");
292 		audit_log_untrustedstring(ab, inode->i_sb->s_id);
293 		audit_log_format(ab, " ino=%lu", inode->i_ino);
303 				audit_log_format(ab, " opid=%d ocomm=", pid);
304 				audit_log_untrustedstring(ab,
322 				print_ipv4_addr(ab, inet->inet_rcv_saddr,
325 				print_ipv4_addr(ab, inet->inet_daddr,
334 				print_ipv6_addr(ab, &sk->sk_v6_rcv_saddr,
337 				print_ipv6_addr(ab, &sk->sk_v6_daddr,
349 					audit_log_d_path(ab, " path=", &u->path);
354 				audit_log_format(ab, " path=");
356 					audit_log_untrustedstring(ab, p);
358 					audit_log_n_hex(ab, p, len);
365 			print_ipv4_addr(ab, a->u.net->v4info.saddr,
368 			print_ipv4_addr(ab, a->u.net->v4info.daddr,
373 			print_ipv6_addr(ab, &a->u.net->v6info.saddr,
376 			print_ipv6_addr(ab, &a->u.net->v6info.daddr,
387 				audit_log_format(ab, " netif=%s", dev->name);
394 		audit_log_format(ab, " key_serial=%u", a->u.key_struct.key);
396 			audit_log_format(ab, " key_desc=");
397 			audit_log_untrustedstring(ab, a->u.key_struct.key_desc);
402 		audit_log_format(ab, " kmod=");
403 		audit_log_untrustedstring(ab, a->u.kmod_name);
412 		audit_log_format(ab, " pkey=0x%x subnet_prefix=%pI6c",
417 		audit_log_format(ab, " device=%s port_num=%u",
422 		audit_log_format(ab, " lockdown_reason=\"%s\"",
426 		audit_log_format(ab, " anonclass=%s", a->u.anonclass);
444 	struct audit_buffer *ab;
449 	ab = audit_log_start(audit_context(), GFP_ATOMIC | __GFP_NOWARN,
452 	if (ab == NULL)
456 		pre_audit(ab, a);
458 	dump_common_audit_data(ab, a);
461 		post_audit(ab, a);
463 	audit_log_end(ab);