diff options
| author | Paul Moore <paul@paul-moore.com> | 2021-04-19 03:54:47 +0200 |
|---|---|---|
| committer | Paul Moore <paul@paul-moore.com> | 2021-09-20 04:34:38 +0200 |
| commit | 67daf270cebcf7aab4b3292b36f9adf357b23ddc (patch) | |
| tree | 6f5bbbe164b0f6e45c269291b908c4ae1116d17f /kernel/audit_tree.c | |
| parent | audit,io_uring,io-wq: add some basic audit support to io_uring (diff) | |
| download | linux-67daf270cebcf7aab4b3292b36f9adf357b23ddc.tar.xz linux-67daf270cebcf7aab4b3292b36f9adf357b23ddc.zip | |
audit: add filtering for io_uring records
This patch adds basic audit io_uring filtering, using as much of the
existing audit filtering infrastructure as possible. In order to do
this we reuse the audit filter rule's syscall mask for the io_uring
operation and we create a new filter for io_uring operations as
AUDIT_FILTER_URING_EXIT/audit_filter_list[7].
Thanks to Richard Guy Briggs for his review, feedback, and work on
the corresponding audit userspace changes.
Acked-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'kernel/audit_tree.c')
| -rw-r--r-- | kernel/audit_tree.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/kernel/audit_tree.c b/kernel/audit_tree.c index 2cd7b5694422..338c53a961c5 100644 --- a/kernel/audit_tree.c +++ b/kernel/audit_tree.c @@ -726,7 +726,8 @@ int audit_make_tree(struct audit_krule *rule, char *pathname, u32 op) { if (pathname[0] != '/' || - rule->listnr != AUDIT_FILTER_EXIT || + (rule->listnr != AUDIT_FILTER_EXIT && + rule->listnr != AUDIT_FILTER_URING_EXIT) || op != Audit_equal || rule->inode_f || rule->watch || rule->tree) return -EINVAL; |