diff options
author | Steve Grubb <sgrubb@redhat.com> | 2017-10-13 05:24:01 +0200 |
---|---|---|
committer | Paul Moore <paul@paul-moore.com> | 2017-11-10 22:08:28 +0100 |
commit | 6e66ec3cae02952fcfc285cb156c11dcc61f4453 (patch) | |
tree | 805fc6f8b32ae9976aca21263800e8bd0bc3250e | |
parent | audit: use audit_set_enabled() in audit_enable() (diff) | |
download | linux-6e66ec3cae02952fcfc285cb156c11dcc61f4453.tar.xz linux-6e66ec3cae02952fcfc285cb156c11dcc61f4453.zip |
audit: Add new syscalls to the perm=w filter
The audit subsystem allows selecting audit events based on watches for
a particular behavior like writing to a file. A lot of syscalls have
been added without updating the list. This patch adds 2 syscalls to the
write filters: fallocate and renameat2.
Signed-off-by: Steve Grubb <sgrubb@redhat.com>
Reviewed-by: Richard Guy Briggs <rgb@redhat.com>
[PM: cleaned up some whitespace errors]
Signed-off-by: Paul Moore <paul@paul-moore.com>
-rw-r--r-- | include/asm-generic/audit_dir_write.h | 3 | ||||
-rw-r--r-- | include/asm-generic/audit_write.h | 3 |
2 files changed, 6 insertions, 0 deletions
diff --git a/include/asm-generic/audit_dir_write.h b/include/asm-generic/audit_dir_write.h index 7b61db4fe72b..cf1ebc39d4fb 100644 --- a/include/asm-generic/audit_dir_write.h +++ b/include/asm-generic/audit_dir_write.h @@ -30,3 +30,6 @@ __NR_renameat, __NR_linkat, __NR_symlinkat, #endif +#ifdef __NR_renameat2 +__NR_renameat2, +#endif diff --git a/include/asm-generic/audit_write.h b/include/asm-generic/audit_write.h index 274575d7129f..f5c4906d24df 100644 --- a/include/asm-generic/audit_write.h +++ b/include/asm-generic/audit_write.h @@ -19,3 +19,6 @@ __NR_ftruncate64, #ifdef __NR_bind __NR_bind, /* bind can affect fs object only in one way... */ #endif +#ifdef __NR_fallocate +__NR_fallocate, +#endif |