提交 6e66ec3c 编写于 作者: S Steve Grubb 提交者: Paul Moore

audit: Add new syscalls to the perm=w filter

The audit subsystem allows selecting audit events based on watches for
a particular behavior like writing to a file. A lot of syscalls have
been added without updating the list. This patch adds 2 syscalls to the
write filters: fallocate and renameat2.
Signed-off-by: NSteve Grubb <sgrubb@redhat.com>
Reviewed-by: NRichard Guy Briggs <rgb@redhat.com>
[PM: cleaned up some whitespace errors]
Signed-off-by: NPaul Moore <paul@paul-moore.com>
上级 5d842a5b
......@@ -30,3 +30,6 @@ __NR_renameat,
__NR_linkat,
__NR_symlinkat,
#endif
#ifdef __NR_renameat2
__NR_renameat2,
#endif
......@@ -19,3 +19,6 @@ __NR_ftruncate64,
#ifdef __NR_bind
__NR_bind, /* bind can affect fs object only in one way... */
#endif
#ifdef __NR_fallocate
__NR_fallocate,
#endif
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册