diff options
| author | Jeff Vander Stoep <jeffv@google.com> | 2015-07-10 17:19:55 -0400 |
|---|---|---|
| committer | Mark Salyzyn <|account-1032276@2620:0:1000:1601:ec85:28e2:ddf:4b24> | 2015-10-29 20:14:17 +0000 |
| commit | b56a01d4e2805fb6f7a0337f84a7c960cc62e2e0 (patch) | |
| tree | fd94748ef2091abe1de6fac6327b24868a82bc44 /security | |
| parent | b1b3844449d596e5f25f591d89611c7e57d32610 (diff) | |
security: add ioctl specific auditing to lsm_audit
(cherry pick from commit 671a2781ff01abf4fdc8904881fc3abd3a8279af)
Add information about ioctl calls to the LSM audit data. Log the
file path and command number.
Signed-off-by: Jeff Vander Stoep <jeffv@google.com>
Acked-by: Nick Kralevich <nnk@google.com>
[PM: subject line tweak]
Signed-off-by: Paul Moore <pmoore@redhat.com>
Bug: 22846070
Change-Id: I88a6ecdd59297a315a6fb9c82c0a798bdb6bafaa
Diffstat (limited to 'security')
| -rw-r--r-- | security/lsm_audit.c | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/security/lsm_audit.c b/security/lsm_audit.c index 69fdf3bc765b..7147c17fce72 100644 --- a/security/lsm_audit.c +++ b/security/lsm_audit.c @@ -245,6 +245,21 @@ static void dump_common_audit_data(struct audit_buffer *ab, } break; } + case LSM_AUDIT_DATA_IOCTL_OP: { + struct inode *inode; + + audit_log_d_path(ab, " path=", &a->u.op->path); + + inode = a->u.op->path.dentry->d_inode; + if (inode) { + audit_log_format(ab, " dev="); + audit_log_untrustedstring(ab, inode->i_sb->s_id); + audit_log_format(ab, " ino=%lu", inode->i_ino); + } + + audit_log_format(ab, " ioctlcmd=%hx", a->u.op->cmd); + break; + } case LSM_AUDIT_DATA_DENTRY: { struct inode *inode; |