mirror of
https://github.com/Fishwaldo/Star64_linux.git
synced 2025-06-22 14:41:27 +00:00
[PATCH] auditing ptrace
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
This commit is contained in:
parent
129a84de23
commit
a5cb013da7
3 changed files with 42 additions and 0 deletions
|
@ -209,6 +209,9 @@ struct audit_context {
|
|||
unsigned long personality;
|
||||
int arch;
|
||||
|
||||
pid_t target_pid;
|
||||
u32 target_sid;
|
||||
|
||||
#if AUDIT_DEBUG
|
||||
int put_count;
|
||||
int ino_count;
|
||||
|
@ -973,6 +976,23 @@ static void audit_log_exit(struct audit_context *context, struct task_struct *ts
|
|||
audit_log_end(ab);
|
||||
}
|
||||
|
||||
if (context->target_pid) {
|
||||
ab =audit_log_start(context, GFP_KERNEL, AUDIT_OBJ_PID);
|
||||
if (ab) {
|
||||
char *s = NULL, *t;
|
||||
u32 len;
|
||||
if (selinux_sid_to_string(context->target_sid,
|
||||
&s, &len))
|
||||
t = "(none)";
|
||||
else
|
||||
t = s;
|
||||
audit_log_format(ab, "opid=%d obj=%s",
|
||||
context->target_pid, t);
|
||||
audit_log_end(ab);
|
||||
kfree(s);
|
||||
}
|
||||
}
|
||||
|
||||
if (context->pwd && context->pwdmnt) {
|
||||
ab = audit_log_start(context, GFP_KERNEL, AUDIT_CWD);
|
||||
if (ab) {
|
||||
|
@ -1193,6 +1213,7 @@ void audit_syscall_exit(int valid, long return_code)
|
|||
} else {
|
||||
audit_free_names(context);
|
||||
audit_free_aux(context);
|
||||
context->target_pid = 0;
|
||||
kfree(context->filterkey);
|
||||
context->filterkey = NULL;
|
||||
tsk->audit_context = context;
|
||||
|
@ -1880,6 +1901,14 @@ int audit_sockaddr(int len, void *a)
|
|||
return 0;
|
||||
}
|
||||
|
||||
void __audit_ptrace(struct task_struct *t)
|
||||
{
|
||||
struct audit_context *context = current->audit_context;
|
||||
|
||||
context->target_pid = t->pid;
|
||||
selinux_get_task_sid(t, &context->target_sid);
|
||||
}
|
||||
|
||||
/**
|
||||
* audit_avc_path - record the granting or denial of permissions
|
||||
* @dentry: dentry to record
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue