提交 · 79d20b14a0d651f15b0ef9a22b6cf12d284a6d38 · openanolis / cloud-kernel

03 5月, 2005 1 次提交

[AUDIT] Update UML audit-syscall-{entry,exit} calls to new prototypes · 79d20b14

由 Jeff Dike 提交于 5月 03, 2005

This patch is for -mm only.  It should probably be included in git-audit,
and should be forwarded to Linus iff git-audit is.

It updates the audit-syscall-{entry,exit} calls to current -mm.
Signed-off-by: NJeff Dike <jdike@addtoit.com>
Cc: David Woodhouse <dwmw2@infradead.org>
Signed-off-by: NAndrew Morton <akpm@osdl.org>
Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>

79d20b14

30 4月, 2005 3 次提交

netlink audit warning fix · 54e0f520

由 Andrew Morton 提交于 4月 30, 2005

scumbags!

net/netlink/af_netlink.c: In function `netlink_sendmsg':
net/netlink/af_netlink.c:908: warning: implicit declaration of function `audit_get_loginuid'
Signed-off-by: NAndrew Morton <akpm@osdl.org>
Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>

54e0f520

[AUDIT] LOGIN message credentials · 456be6cd

由 Steve Grubb 提交于 4月 29, 2005

Attached is a new patch that solves the issue of getting valid credentials
into the LOGIN message. The current code was assuming that the audit context
had already been copied. This is not always the case for LOGIN messages.

To solve the problem, the patch passes the task struct to the function that
emits the message where it can get valid credentials.
Signed-off-by: NSteve Grubb <sgrubb@redhat.com>
Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>

456be6cd

[AUDIT] Requeue messages at head of queue, up to audit_backlog · 37509e74

由 Chris Wright 提交于 4月 29, 2005

If netlink_unicast() fails, requeue the skb back at the head of the queue
it just came from, instead of the tail. And do so unless we've exceeded
the audit_backlog limit; not according to some other arbitrary limit.

From: Chris Wright <chrisw@osdl.org>
Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>

37509e74

29 4月, 2005 36 次提交

Add audit uid to netlink credentials · c94c257c

由 Serge Hallyn 提交于 4月 29, 2005

Most audit control messages are sent over netlink.In order to properly
log the identity of the sender of audit control messages, we would like
to add the loginuid to the netlink_creds structure, as per the attached
patch.
Signed-off-by: NSerge Hallyn <serue@us.ibm.com>
Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>

c94c257c

audit: update pointer to userspace tools, remove emacs mode tags · 85c8721f
由提交于 4月 29, 2005

85c8721f

mips: warning fix audit_arch() · 67eb81e1

由 Yoichi Yuasa 提交于 4月 29, 2005

arch/mips/kernel/ptrace.c:305: warning: function declaration isn't a prototype
Signed-off-by: NYoichi Yuasa <yuasa@hh.iij4u.or.jp>
Signed-off-by: NAndrew Morton <akpm@osdl.org>
Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>

67eb81e1

[PATCH] fix ia64 syscall auditing · 3ac3ed55

由 Amy Griffis 提交于 4月 29, 2005

Attached is a patch against David's audit.17 kernel that adds checks
for the TIF_SYSCALL_AUDIT thread flag to the ia64 system call and
signal handling code paths.The patch enables auditing of system
calls set up via fsys_bubble_down, as well as ensuring that
audit_syscall_exit() is called on return from sigreturn.

Neglecting to check for TIF_SYSCALL_AUDIT at these points results in
incorrect information in audit_context, causing frequent system panics
when system call auditing is enabled on an ia64 system.
Signed-off-by: NAmy Griffis <amy.griffis@hp.com>
Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>

3ac3ed55

[AUDIT] Avoid using %*.*s format strings. · c7fcb0ee

由 Peter Martuccelli 提交于 4月 29, 2005

They don't seem to work correctly (investigation ongoing), but we don't
actually need to do it anyway.

Patch from Peter Martuccelli <peterm@redhat.com>
Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>

c7fcb0ee

[AUDIT] Fix signedness of 'serial' in various routines. · d812ddbb

由 Steve Grubb 提交于 4月 29, 2005

Attached is a patch that corrects a signed/unsigned warning. I also noticed
that we needlessly init serial to 0. That only needs to occur if the kernel
was compiled without the audit system.

-Steve Grubb
Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>

d812ddbb

[AUDIT] Don't allow ptrace to fool auditing, log arch of audited syscalls. · 2fd6f58b

由提交于 4月 29, 2005

We were calling ptrace_notify() after auditing the syscall and arguments,
but the debugger could have _changed_ them before the syscall was actually
invoked. Reorder the calls to fix that.

While we're touching ever call to audit_syscall_entry(), we also make it
take an extra argument: the architecture of the syscall which was made,
because some architectures allow more than one type of syscall.

Also add an explicit success/failure flag to audit_syscall_exit(), for
the benefit of architectures which return that in a condition register
rather than only returning a single register.

Change type of syscall return value to 'long' not 'int'.
Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>

2fd6f58b

namei: add audit_inode to all branches in path_lookup · ea3834d9

由 Prasanna Meda 提交于 4月 29, 2005

Main change is in path_lookup: added a goto to do audit_inode
instead of return statement, when emul_lookup_dentry for root
is successful.The existing code does audit_inode only when
lookup is done in normal root or cwd.

Other changes: Some lookup routines are returning zero on success,
and some are returning zero on failure. I documented the related
function signatures in this code path, so that one can glance over
abstract functions without understanding the entire code.
Signed-off-by: NPrasanna Meda <pmeda@akamai.com>
Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>

ea3834d9

audit_log_untrustedstring() warning fix · 81b7854d

由 Andrew Morton 提交于 4月 29, 2005

kernel/audit.c: In function `audit_log_untrustedstring':
kernel/audit.c:736: warning: comparison is always false due to limited range of data type
Signed-off-by: NAndrew Morton <akpm@osdl.org>
Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>

81b7854d

AUDIT: Avoid log pollution by untrusted strings. · 83c7d091

由提交于 4月 29, 2005

We log strings from userspace, such as arguments to open(). These could
be formatted to contain \n followed by fake audit log entries. Provide
a function for logging such strings, which gives a hex dump when the
string contains anything but basic printable ASCII characters. Use it
for logging filenames.
Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>

83c7d091

[PATCH] x86_64: fix PT_NOTE addition to IA32 vDSO · c60c3906

由 Roland McGrath 提交于 4月 28, 2005

The addition of the PT_NOTE didn't take in the x86_64 version of the i386
vDSO, because I forgot the linker script bit in that copy.
Signed-off-by: NRoland McGrath <roland@redhat.com>
Signed-off-by: NLinus Torvalds <torvalds@osdl.org>

c60c3906

[PATCH] cifs: Do not sleep interruptible after socket connect failure · 0cb766ae