Function report |
Source Code:security\lsm_audit.c |
Create Date:2022-07-28 19:31:06 |
Last Modify:2020-03-12 14:18:49 | Copyright©Brick |
home page | Tree |
Annotation kernel can get tool activity | Download SCCT | Chinese |
Name:dump_common_audit_data - helper to dump common audit data*@a : common audit data
Proto:static void dump_common_audit_data(struct audit_buffer *ab, struct common_audit_data *a)
Type:void
Parameter:
Type | Parameter | Name |
---|---|---|
struct audit_buffer * | ab | |
struct common_audit_data * | a |
218 | BUILD_BUG_ON - break compile if a condition is true( size of u > size of * * 2) |
224 | Case type == LSM_AUDIT_DATA_NONE |
225 | Return |
226 | Case type == LSM_AUDIT_DATA_IPC |
229 | Case type == LSM_AUDIT_DATA_CAP |
232 | Case type == LSM_AUDIT_DATA_PATH |
238 | If inode Then |
243 | Break |
245 | Case type == LSM_AUDIT_DATA_FILE |
258 | Case type == LSM_AUDIT_DATA_IOCTL_OP |
273 | Case type == LSM_AUDIT_DATA_DENTRY |
280 | If inode Then |
285 | Break |
287 | Case type == LSM_AUDIT_DATA_INODE |
304 | Case type == LSM_AUDIT_DATA_TASK |
317 | Case type == LSM_AUDIT_DATA_NET |
318 | If sk Then |
322 | len = 0 |
323 | char * p = NULL |
326 | Case sk_family == Internet IP Protocol |
329 | print_ipv4_addr(ab, inet_rcv_saddr, inet_sport, "laddr", "lport") |
332 | print_ipv4_addr(ab, inet_daddr, inet_dport, "faddr", "fport") |
335 | Break |
338 | Case sk_family == IP version 6 |
341 | print_ipv6_addr(ab, & sk_v6_rcv_saddr, inet_sport, "laddr", "lport") |
344 | print_ipv6_addr(ab, & sk_v6_daddr, inet_dport, "faddr", "fport") |
347 | Break |
350 | Case sk_family == Unix domain sockets |
352 | addr = smp_load_acquire( & addr) |
353 | If Not addr Then Break |
355 | If dentry Then |
357 | Break |
366 | Break |
371 | Case family == Internet IP Protocol |
372 | print_ipv4_addr(ab, saddr, sport, "saddr", "src") |
375 | print_ipv4_addr(ab, daddr, dport, "daddr", "dest") |
378 | Break |
379 | Case family == IP version 6 |
380 | print_ipv6_addr(ab, & saddr, sport, "saddr", "src") |
383 | print_ipv6_addr(ab, & daddr, dport, "daddr", "dest") |
386 | Break |
388 | If netif > 0 Then |
393 | If dev Then |
398 | Break |
400 | Case type == LSM_AUDIT_DATA_KEY |
408 | Case type == LSM_AUDIT_DATA_KMOD |
411 | Break |
412 | Case type == LSM_AUDIT_DATA_IBPKEY |
417 | memcpy( & s6_addr, & subnet_prefix, size of subnet_prefix ) |
421 | Break |
423 | Case type == LSM_AUDIT_DATA_IBENDPORT |
Name | Describe |
---|---|
common_lsm_audit | mmon_lsm_audit - generic LSM auditing function*@a: auxiliary audit data*@pre_audit: lsm-specific pre-audit callback*@post_audit: lsm-specific post-audit callback* setup the audit buffer for common security information* uses callback to print LSM specific |
Source code conversion tool public plug-in interface | X |
---|---|
Support c/c++/esqlc/java Oracle/Informix/Mysql Plug-in can realize: logical Report Code generation and batch code conversion |