Orange Pi5 kernel

^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   1) // SPDX-License-Identifier: GPL-2.0-only
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   2) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   3)  * common LSM auditing functions
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   4)  *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   5)  * Based on code written for SELinux by :
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   6)  *			Stephen Smalley, <sds@tycho.nsa.gov>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   7)  * 			James Morris <jmorris@redhat.com>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   8)  * Author : Etienne Basset, <etienne.basset@ensta.org>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   9)  */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  10) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  11) #include <linux/types.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  12) #include <linux/stddef.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  13) #include <linux/kernel.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  14) #include <linux/gfp.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  15) #include <linux/fs.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  16) #include <linux/init.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  17) #include <net/sock.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  18) #include <linux/un.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  19) #include <net/af_unix.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  20) #include <linux/audit.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  21) #include <linux/ipv6.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  22) #include <linux/ip.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  23) #include <net/ip.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  24) #include <net/ipv6.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  25) #include <linux/tcp.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  26) #include <linux/udp.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  27) #include <linux/dccp.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  28) #include <linux/sctp.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  29) #include <linux/lsm_audit.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  30) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  31) /**
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  32)  * ipv4_skb_to_auditdata : fill auditdata from skb
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  33)  * @skb : the skb
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  34)  * @ad : the audit data to fill
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  35)  * @proto : the layer 4 protocol
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  36)  *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  37)  * return  0 on success
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  38)  */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  39) int ipv4_skb_to_auditdata(struct sk_buff *skb,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  40) 		struct common_audit_data *ad, u8 *proto)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  41) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  42) 	int ret = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  43) 	struct iphdr *ih;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  44) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  45) 	ih = ip_hdr(skb);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  46) 	if (ih == NULL)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  47) 		return -EINVAL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  48) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  49) 	ad->u.net->v4info.saddr = ih->saddr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  50) 	ad->u.net->v4info.daddr = ih->daddr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  51) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  52) 	if (proto)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  53) 		*proto = ih->protocol;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  54) 	/* non initial fragment */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  55) 	if (ntohs(ih->frag_off) & IP_OFFSET)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  56) 		return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  57) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  58) 	switch (ih->protocol) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  59) 	case IPPROTO_TCP: {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  60) 		struct tcphdr *th = tcp_hdr(skb);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  61) 		if (th == NULL)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  62) 			break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  63) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  64) 		ad->u.net->sport = th->source;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  65) 		ad->u.net->dport = th->dest;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  66) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  67) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  68) 	case IPPROTO_UDP: {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  69) 		struct udphdr *uh = udp_hdr(skb);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  70) 		if (uh == NULL)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  71) 			break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  72) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  73) 		ad->u.net->sport = uh->source;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  74) 		ad->u.net->dport = uh->dest;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  75) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  76) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  77) 	case IPPROTO_DCCP: {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  78) 		struct dccp_hdr *dh = dccp_hdr(skb);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  79) 		if (dh == NULL)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  80) 			break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  81) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  82) 		ad->u.net->sport = dh->dccph_sport;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  83) 		ad->u.net->dport = dh->dccph_dport;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  84) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  85) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  86) 	case IPPROTO_SCTP: {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  87) 		struct sctphdr *sh = sctp_hdr(skb);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  88) 		if (sh == NULL)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  89) 			break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  90) 		ad->u.net->sport = sh->source;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  91) 		ad->u.net->dport = sh->dest;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  92) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  93) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  94) 	default:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  95) 		ret = -EINVAL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  96) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  97) 	return ret;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  98) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  99) #if IS_ENABLED(CONFIG_IPV6)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 100) /**
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 101)  * ipv6_skb_to_auditdata : fill auditdata from skb
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 102)  * @skb : the skb
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 103)  * @ad : the audit data to fill
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 104)  * @proto : the layer 4 protocol
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 105)  *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 106)  * return  0 on success
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 107)  */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 108) int ipv6_skb_to_auditdata(struct sk_buff *skb,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 109) 		struct common_audit_data *ad, u8 *proto)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 110) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 111) 	int offset, ret = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 112) 	struct ipv6hdr *ip6;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 113) 	u8 nexthdr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 114) 	__be16 frag_off;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 115) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 116) 	ip6 = ipv6_hdr(skb);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 117) 	if (ip6 == NULL)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 118) 		return -EINVAL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 119) 	ad->u.net->v6info.saddr = ip6->saddr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 120) 	ad->u.net->v6info.daddr = ip6->daddr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 121) 	ret = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 122) 	/* IPv6 can have several extension header before the Transport header
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 123) 	 * skip them */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 124) 	offset = skb_network_offset(skb);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 125) 	offset += sizeof(*ip6);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 126) 	nexthdr = ip6->nexthdr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 127) 	offset = ipv6_skip_exthdr(skb, offset, &nexthdr, &frag_off);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 128) 	if (offset < 0)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 129) 		return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 130) 	if (proto)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 131) 		*proto = nexthdr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 132) 	switch (nexthdr) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 133) 	case IPPROTO_TCP: {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 134) 		struct tcphdr _tcph, *th;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 135) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 136) 		th = skb_header_pointer(skb, offset, sizeof(_tcph), &_tcph);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 137) 		if (th == NULL)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 138) 			break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 139) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 140) 		ad->u.net->sport = th->source;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 141) 		ad->u.net->dport = th->dest;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 142) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 143) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 144) 	case IPPROTO_UDP: {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 145) 		struct udphdr _udph, *uh;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 146) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 147) 		uh = skb_header_pointer(skb, offset, sizeof(_udph), &_udph);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 148) 		if (uh == NULL)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 149) 			break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 150) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 151) 		ad->u.net->sport = uh->source;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 152) 		ad->u.net->dport = uh->dest;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 153) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 154) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 155) 	case IPPROTO_DCCP: {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 156) 		struct dccp_hdr _dccph, *dh;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 157) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 158) 		dh = skb_header_pointer(skb, offset, sizeof(_dccph), &_dccph);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 159) 		if (dh == NULL)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 160) 			break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 161) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 162) 		ad->u.net->sport = dh->dccph_sport;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 163) 		ad->u.net->dport = dh->dccph_dport;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 164) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 165) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 166) 	case IPPROTO_SCTP: {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 167) 		struct sctphdr _sctph, *sh;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 168) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 169) 		sh = skb_header_pointer(skb, offset, sizeof(_sctph), &_sctph);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 170) 		if (sh == NULL)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 171) 			break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 172) 		ad->u.net->sport = sh->source;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 173) 		ad->u.net->dport = sh->dest;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 174) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 175) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 176) 	default:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 177) 		ret = -EINVAL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 178) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 179) 	return ret;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 180) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 181) #endif
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 182) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 183) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 184) static inline void print_ipv6_addr(struct audit_buffer *ab,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 185) 				   struct in6_addr *addr, __be16 port,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 186) 				   char *name1, char *name2)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 187) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 188) 	if (!ipv6_addr_any(addr))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 189) 		audit_log_format(ab, " %s=%pI6c", name1, addr);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 190) 	if (port)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 191) 		audit_log_format(ab, " %s=%d", name2, ntohs(port));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 192) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 193) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 194) static inline void print_ipv4_addr(struct audit_buffer *ab, __be32 addr,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 195) 				   __be16 port, char *name1, char *name2)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 196) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 197) 	if (addr)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 198) 		audit_log_format(ab, " %s=%pI4", name1, &addr);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 199) 	if (port)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 200) 		audit_log_format(ab, " %s=%d", name2, ntohs(port));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 201) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 202) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 203) /**
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 204)  * dump_common_audit_data - helper to dump common audit data
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 205)  * @a : common audit data
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 206)  *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 207)  */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 208) static void dump_common_audit_data(struct audit_buffer *ab,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 209) 				   struct common_audit_data *a)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 210) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 211) 	char comm[sizeof(current->comm)];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 212) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 213) 	/*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 214) 	 * To keep stack sizes in check force programers to notice if they
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 215) 	 * start making this union too large!  See struct lsm_network_audit
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 216) 	 * as an example of how to deal with large data.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 217) 	 */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 218) 	BUILD_BUG_ON(sizeof(a->u) > sizeof(void *)*2);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 219) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 220) 	audit_log_format(ab, " pid=%d comm=", task_tgid_nr(current));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 221) 	audit_log_untrustedstring(ab, memcpy(comm, current->comm, sizeof(comm)));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 222) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 223) 	switch (a->type) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 224) 	case LSM_AUDIT_DATA_NONE:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 225) 		return;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 226) 	case LSM_AUDIT_DATA_IPC:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 227) 		audit_log_format(ab, " key=%d ", a->u.ipc_id);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 228) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 229) 	case LSM_AUDIT_DATA_CAP:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 230) 		audit_log_format(ab, " capability=%d ", a->u.cap);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 231) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 232) 	case LSM_AUDIT_DATA_PATH: {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 233) 		struct inode *inode;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 234) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 235) 		audit_log_d_path(ab, " path=", &a->u.path);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 236) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 237) 		inode = d_backing_inode(a->u.path.dentry);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 238) 		if (inode) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 239) 			audit_log_format(ab, " dev=");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 240) 			audit_log_untrustedstring(ab, inode->i_sb->s_id);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 241) 			audit_log_format(ab, " ino=%lu", inode->i_ino);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 242) 		}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 243) 		audit_getcwd();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 244) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 245) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 246) 	case LSM_AUDIT_DATA_FILE: {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 247) 		struct inode *inode;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 248) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 249) 		audit_log_d_path(ab, " path=", &a->u.file->f_path);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 250) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 251) 		inode = file_inode(a->u.file);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 252) 		if (inode) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 253) 			audit_log_format(ab, " dev=");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 254) 			audit_log_untrustedstring(ab, inode->i_sb->s_id);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 255) 			audit_log_format(ab, " ino=%lu", inode->i_ino);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 256) 		}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 257) 		audit_getcwd();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 258) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 259) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 260) 	case LSM_AUDIT_DATA_IOCTL_OP: {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 261) 		struct inode *inode;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 262) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 263) 		audit_log_d_path(ab, " path=", &a->u.op->path);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 264) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 265) 		inode = a->u.op->path.dentry->d_inode;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 266) 		if (inode) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 267) 			audit_log_format(ab, " dev=");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 268) 			audit_log_untrustedstring(ab, inode->i_sb->s_id);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 269) 			audit_log_format(ab, " ino=%lu", inode->i_ino);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 270) 		}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 271) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 272) 		audit_log_format(ab, " ioctlcmd=0x%hx", a->u.op->cmd);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 273) 		audit_getcwd();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 274) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 275) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 276) 	case LSM_AUDIT_DATA_DENTRY: {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 277) 		struct inode *inode;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 278) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 279) 		audit_log_format(ab, " name=");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 280) 		spin_lock(&a->u.dentry->d_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 281) 		audit_log_untrustedstring(ab, a->u.dentry->d_name.name);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 282) 		spin_unlock(&a->u.dentry->d_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 283) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 284) 		inode = d_backing_inode(a->u.dentry);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 285) 		if (inode) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 286) 			audit_log_format(ab, " dev=");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 287) 			audit_log_untrustedstring(ab, inode->i_sb->s_id);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 288) 			audit_log_format(ab, " ino=%lu", inode->i_ino);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 289) 		}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 290) 		audit_getcwd();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 291) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 292) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 293) 	case LSM_AUDIT_DATA_INODE: {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 294) 		struct dentry *dentry;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 295) 		struct inode *inode;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 296) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 297) 		inode = a->u.inode;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 298) 		dentry = d_find_alias(inode);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 299) 		if (dentry) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 300) 			audit_log_format(ab, " name=");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 301) 			spin_lock(&dentry->d_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 302) 			audit_log_untrustedstring(ab, dentry->d_name.name);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 303) 			spin_unlock(&dentry->d_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 304) 			dput(dentry);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 305) 		}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 306) 		audit_log_format(ab, " dev=");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 307) 		audit_log_untrustedstring(ab, inode->i_sb->s_id);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 308) 		audit_log_format(ab, " ino=%lu", inode->i_ino);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 309) 		audit_getcwd();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 310) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 311) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 312) 	case LSM_AUDIT_DATA_TASK: {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 313) 		struct task_struct *tsk = a->u.tsk;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 314) 		if (tsk) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 315) 			pid_t pid = task_tgid_nr(tsk);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 316) 			if (pid) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 317) 				char comm[sizeof(tsk->comm)];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 318) 				audit_log_format(ab, " opid=%d ocomm=", pid);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 319) 				audit_log_untrustedstring(ab,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 320) 				    memcpy(comm, tsk->comm, sizeof(comm)));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 321) 			}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 322) 		}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 323) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 324) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 325) 	case LSM_AUDIT_DATA_NET:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 326) 		if (a->u.net->sk) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 327) 			struct sock *sk = a->u.net->sk;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 328) 			struct unix_sock *u;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 329) 			struct unix_address *addr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 330) 			int len = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 331) 			char *p = NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 332) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 333) 			switch (sk->sk_family) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 334) 			case AF_INET: {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 335) 				struct inet_sock *inet = inet_sk(sk);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 336) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 337) 				print_ipv4_addr(ab, inet->inet_rcv_saddr,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 338) 						inet->inet_sport,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 339) 						"laddr", "lport");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 340) 				print_ipv4_addr(ab, inet->inet_daddr,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 341) 						inet->inet_dport,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 342) 						"faddr", "fport");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 343) 				break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 344) 			}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 345) #if IS_ENABLED(CONFIG_IPV6)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 346) 			case AF_INET6: {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 347) 				struct inet_sock *inet = inet_sk(sk);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 348) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 349) 				print_ipv6_addr(ab, &sk->sk_v6_rcv_saddr,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 350) 						inet->inet_sport,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 351) 						"laddr", "lport");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 352) 				print_ipv6_addr(ab, &sk->sk_v6_daddr,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 353) 						inet->inet_dport,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 354) 						"faddr", "fport");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 355) 				break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 356) 			}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 357) #endif
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 358) 			case AF_UNIX:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 359) 				u = unix_sk(sk);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 360) 				addr = smp_load_acquire(&u->addr);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 361) 				if (!addr)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 362) 					break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 363) 				if (u->path.dentry) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 364) 					audit_log_d_path(ab, " path=", &u->path);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 365) 					break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 366) 				}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 367) 				len = addr->len-sizeof(short);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 368) 				p = &addr->name->sun_path[0];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 369) 				audit_log_format(ab, " path=");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 370) 				if (*p)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 371) 					audit_log_untrustedstring(ab, p);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 372) 				else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 373) 					audit_log_n_hex(ab, p, len);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 374) 				break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 375) 			}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 376) 		}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 377) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 378) 		switch (a->u.net->family) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 379) 		case AF_INET:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 380) 			print_ipv4_addr(ab, a->u.net->v4info.saddr,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 381) 					a->u.net->sport,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 382) 					"saddr", "src");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 383) 			print_ipv4_addr(ab, a->u.net->v4info.daddr,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 384) 					a->u.net->dport,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 385) 					"daddr", "dest");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 386) 			break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 387) 		case AF_INET6:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 388) 			print_ipv6_addr(ab, &a->u.net->v6info.saddr,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 389) 					a->u.net->sport,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 390) 					"saddr", "src");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 391) 			print_ipv6_addr(ab, &a->u.net->v6info.daddr,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 392) 					a->u.net->dport,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 393) 					"daddr", "dest");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 394) 			break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 395) 		}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 396) 		if (a->u.net->netif > 0) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 397) 			struct net_device *dev;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 398) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 399) 			/* NOTE: we always use init's namespace */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 400) 			dev = dev_get_by_index(&init_net, a->u.net->netif);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 401) 			if (dev) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 402) 				audit_log_format(ab, " netif=%s", dev->name);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 403) 				dev_put(dev);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 404) 			}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 405) 		}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 406) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 407) #ifdef CONFIG_KEYS
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 408) 	case LSM_AUDIT_DATA_KEY:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 409) 		audit_log_format(ab, " key_serial=%u", a->u.key_struct.key);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 410) 		if (a->u.key_struct.key_desc) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 411) 			audit_log_format(ab, " key_desc=");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 412) 			audit_log_untrustedstring(ab, a->u.key_struct.key_desc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 413) 		}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 414) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 415) #endif
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 416) 	case LSM_AUDIT_DATA_KMOD:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 417) 		audit_log_format(ab, " kmod=");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 418) 		audit_log_untrustedstring(ab, a->u.kmod_name);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 419) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 420) 	case LSM_AUDIT_DATA_IBPKEY: {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 421) 		struct in6_addr sbn_pfx;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 422) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 423) 		memset(&sbn_pfx.s6_addr, 0,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 424) 		       sizeof(sbn_pfx.s6_addr));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 425) 		memcpy(&sbn_pfx.s6_addr, &a->u.ibpkey->subnet_prefix,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 426) 		       sizeof(a->u.ibpkey->subnet_prefix));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 427) 		audit_log_format(ab, " pkey=0x%x subnet_prefix=%pI6c",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 428) 				 a->u.ibpkey->pkey, &sbn_pfx);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 429) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 430) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 431) 	case LSM_AUDIT_DATA_IBENDPORT:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 432) 		audit_log_format(ab, " device=%s port_num=%u",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 433) 				 a->u.ibendport->dev_name,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 434) 				 a->u.ibendport->port);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 435) 		break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 436) 	} /* switch (a->type) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 437) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 438) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 439) /**
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 440)  * common_lsm_audit - generic LSM auditing function
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 441)  * @a:  auxiliary audit data
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 442)  * @pre_audit: lsm-specific pre-audit callback
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 443)  * @post_audit: lsm-specific post-audit callback
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 444)  *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 445)  * setup the audit buffer for common security information
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 446)  * uses callback to print LSM specific information
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 447)  */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 448) void common_lsm_audit(struct common_audit_data *a,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 449) 	void (*pre_audit)(struct audit_buffer *, void *),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 450) 	void (*post_audit)(struct audit_buffer *, void *))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 451) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 452) 	struct audit_buffer *ab;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 453) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 454) 	if (a == NULL)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 455) 		return;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 456) 	/* we use GFP_ATOMIC so we won't sleep */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 457) 	ab = audit_log_start(audit_context(), GFP_ATOMIC | __GFP_NOWARN,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 458) 			     AUDIT_AVC);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 459) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 460) 	if (ab == NULL)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 461) 		return;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 462) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 463) 	if (pre_audit)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 464) 		pre_audit(ab, a);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 465) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 466) 	dump_common_audit_data(ab, a);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 467) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 468) 	if (post_audit)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 469) 		post_audit(ab, a);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 470) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 471) 	audit_log_end(ab);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 472) }