55669bfa14
add support for AUDIT_PERM predicate Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
38 lines
563 B
C
38 lines
563 B
C
#include <asm-i386/unistd.h>
|
|
|
|
unsigned ia32_dir_class[] = {
|
|
#include <asm-generic/audit_dir_write.h>
|
|
~0U
|
|
};
|
|
|
|
unsigned ia32_chattr_class[] = {
|
|
#include <asm-generic/audit_change_attr.h>
|
|
~0U
|
|
};
|
|
|
|
unsigned ia32_write_class[] = {
|
|
#include <asm-generic/audit_write.h>
|
|
~0U
|
|
};
|
|
|
|
unsigned ia32_read_class[] = {
|
|
#include <asm-generic/audit_read.h>
|
|
~0U
|
|
};
|
|
|
|
int ia32_classify_syscall(unsigned syscall)
|
|
{
|
|
switch(syscall) {
|
|
case __NR_open:
|
|
return 2;
|
|
case __NR_openat:
|
|
return 3;
|
|
case __NR_socketcall:
|
|
return 4;
|
|
case __NR_execve:
|
|
return 5;
|
|
default:
|
|
return 1;
|
|
}
|
|
}
|