1#include <linux/init.h> 2#include <linux/types.h> 3#include <linux/audit.h> 4#include <asm/unistd.h> 5#include "audit.h" 6 7static unsigned dir_class[] = { 8#include <asm-generic/audit_dir_write.h> 9~0U 10}; 11 12static unsigned read_class[] = { 13#include <asm-generic/audit_read.h> 14~0U 15}; 16 17static unsigned write_class[] = { 18#include <asm-generic/audit_write.h> 19~0U 20}; 21 22static unsigned chattr_class[] = { 23#include <asm-generic/audit_change_attr.h> 24~0U 25}; 26 27static unsigned signal_class[] = { 28#include <asm-generic/audit_signal.h> 29~0U 30}; 31 32int audit_classify_arch(int arch) 33{ 34#ifdef CONFIG_COMPAT 35 if (arch == AUDIT_ARCH_S390) 36 return 1; 37#endif 38 return 0; 39} 40 41int audit_classify_syscall(int abi, unsigned syscall) 42{ 43#ifdef CONFIG_COMPAT 44 if (abi == AUDIT_ARCH_S390) 45 return s390_classify_syscall(syscall); 46#endif 47 switch(syscall) { 48 case __NR_open: 49 return 2; 50 case __NR_openat: 51 return 3; 52 case __NR_socketcall: 53 return 4; 54 case __NR_execve: 55 return 5; 56 default: 57 return 0; 58 } 59} 60 61static int __init audit_classes_init(void) 62{ 63#ifdef CONFIG_COMPAT 64 audit_register_class(AUDIT_CLASS_WRITE_32, s390_write_class); 65 audit_register_class(AUDIT_CLASS_READ_32, s390_read_class); 66 audit_register_class(AUDIT_CLASS_DIR_WRITE_32, s390_dir_class); 67 audit_register_class(AUDIT_CLASS_CHATTR_32, s390_chattr_class); 68 audit_register_class(AUDIT_CLASS_SIGNAL_32, s390_signal_class); 69#endif 70 audit_register_class(AUDIT_CLASS_WRITE, write_class); 71 audit_register_class(AUDIT_CLASS_READ, read_class); 72 audit_register_class(AUDIT_CLASS_DIR_WRITE, dir_class); 73 audit_register_class(AUDIT_CLASS_CHATTR, chattr_class); 74 audit_register_class(AUDIT_CLASS_SIGNAL, signal_class); 75 return 0; 76} 77 78__initcall(audit_classes_init); 79