[PATCH 0/2] audit: add support for openat2

Richard Guy Briggs rgb at redhat.com
Thu Mar 18 01:47:16 UTC 2021


The openat2(2) syscall was added in v5.6.  Add support for openat2 to the
audit syscall classifier and for recording openat2 parameters that cannot
be captured in the syscall parameters of the SYSCALL record.

Supporting userspace code can be found in
https://github.com/rgbriggs/audit-userspace/tree/ghau-openat2

Supporting test case can be found in
https://github.com/linux-audit/audit-testsuite/pull/103

Richard Guy Briggs (2):
  audit: add support for the openat2 syscall
  audit: add OPENAT2 record to list how

 arch/alpha/kernel/audit.c          |  2 ++
 arch/ia64/kernel/audit.c           |  2 ++
 arch/parisc/kernel/audit.c         |  2 ++
 arch/parisc/kernel/compat_audit.c  |  2 ++
 arch/powerpc/kernel/audit.c        |  2 ++
 arch/powerpc/kernel/compat_audit.c |  2 ++
 arch/s390/kernel/audit.c           |  2 ++
 arch/s390/kernel/compat_audit.c    |  2 ++
 arch/sparc/kernel/audit.c          |  2 ++
 arch/sparc/kernel/compat_audit.c   |  2 ++
 arch/x86/ia32/audit.c              |  2 ++
 arch/x86/kernel/audit_64.c         |  2 ++
 fs/open.c                          |  2 ++
 include/linux/audit.h              | 10 ++++++++++
 include/uapi/linux/audit.h         |  1 +
 kernel/audit.h                     |  2 ++
 kernel/auditsc.c                   | 19 +++++++++++++++++++
 lib/audit.c                        |  4 ++++
 lib/compat_audit.c                 |  4 ++++
 19 files changed, 66 insertions(+)

-- 
2.27.0




More information about the Linux-audit mailing list