On Sat, Jul 01, 2006 at 06:00:02PM +0000, Linux Kernel Mailing List wrote:
> commit b915543b46a2aa599fdd2169e51bcfd88812a12b
> tree 8025e6654829d4c245b5b6b6f47a84543ebffb7b
> parent 6e5a2d1d32596850a0ebf7fb3e54c0d69901dabd
> author Al Viro <[email protected]> Sat, 01 Jul 2006 11:56:16 -0400
> committer Al Viro <[email protected]> Sat, 01 Jul 2006 15:44:10 -0400
>
> [PATCH] audit syscall classes
>
> Allow to tie upper bits of syscall bitmap in audit rules to kernel-defined
> sets of syscalls. Infrastructure, a couple of classes (with 32bit counterparts
> for biarch targets) and actual tie-in on i386, amd64 and ia64.
>
> Signed-off-by: Al Viro <[email protected]>
>
> arch/i386/kernel/Makefile | 1
> arch/i386/kernel/audit.c | 23 ++++++++++++++++++
> arch/ia64/ia32/Makefile | 1
> arch/ia64/ia32/audit.c | 11 +++++++++
> arch/ia64/kernel/Makefile | 1
> arch/ia64/kernel/audit.c | 29 +++++++++++++++++++++++
> arch/x86_64/ia32/Makefile | 3 ++
> arch/x86_64/ia32/audit.c | 11 +++++++++
> arch/x86_64/kernel/Makefile | 1
> arch/x86_64/kernel/audit.c | 29 +++++++++++++++++++++++
> include/asm-generic/audit_change_attr.h | 18 ++++++++++++++
> include/asm-generic/audit_dir_write.h | 14 +++++++++++
> include/linux/audit.h | 7 +++++
> kernel/auditfilter.c | 39 ++++++++++++++++++++++++++++++++
> 14 files changed, 188 insertions(+)
Excuse my ignorance, but this looks like every architecture needs to add
something like this. If it is needed, is there some easy way to test the
implementation?
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
[Index of Archives]
[Kernel Newbies]
[Netfilter]
[Bugtraq]
[Photo]
[Stuff]
[Gimp]
[Yosemite News]
[MIPS Linux]
[ARM Linux]
[Linux Security]
[Linux RAID]
[Video 4 Linux]
[Linux for the blind]
[Linux Resources]
