mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2026-08-27 15:17:04 -04:00
Add missing file metadata syscalls to the audit PERM class tables, addressing gaps where certain file operations were not properly classified for audit rule matching. Changes: - audit_change_attr.h: Add file_setattr - audit_read.h: Add quotactl_fd, file_getattr, stat, stat64, lstat, lstat64, fstat, fstat64, newfstatat, fstatat64, and statx - audit_write.h: Add quotactl_fd Architecture-specific and conditionally-compiled syscalls are guarded with #ifdef. Signed-off-by: Steve Grubb <sgrubb@redhat.com> Signed-off-by: Ricardo Robaina <rrobaina@redhat.com> Signed-off-by: Paul Moore <paul@paul-moore.com>
29 lines
510 B
C
29 lines
510 B
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
#include <asm-generic/audit_dir_write.h>
|
|
__NR_acct,
|
|
#ifdef __NR_swapon
|
|
__NR_swapon,
|
|
#endif
|
|
__NR_quotactl,
|
|
#ifdef __NR_quotactl_fd
|
|
__NR_quotactl_fd,
|
|
#endif
|
|
#ifdef __NR_truncate
|
|
__NR_truncate,
|
|
#endif
|
|
#ifdef __NR_truncate64
|
|
__NR_truncate64,
|
|
#endif
|
|
#ifdef __NR_ftruncate
|
|
__NR_ftruncate,
|
|
#endif
|
|
#ifdef __NR_ftruncate64
|
|
__NR_ftruncate64,
|
|
#endif
|
|
#ifdef __NR_bind
|
|
__NR_bind, /* bind can affect fs object only in one way... */
|
|
#endif
|
|
#ifdef __NR_fallocate
|
|
__NR_fallocate,
|
|
#endif
|