397 	struct audit_buffer *ab;  in audit_log_config_change()  local
400 	ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE);  in audit_log_config_change()
401 	if (unlikely(!ab))  in audit_log_config_change()
403 	audit_log_format(ab, "%s=%u old=%u", function_name, new, old);  in audit_log_config_change()
404 	audit_log_session_info(ab);  in audit_log_config_change()
405 	rc = audit_log_task_context(ab);  in audit_log_config_change()
408 	audit_log_format(ab, " res=%d", allow_changes);  in audit_log_config_change()
409 	audit_log_end(ab);  in audit_log_config_change()
1057 static void audit_log_common_recv_msg(struct audit_buffer **ab, u16 msg_type)  in audit_log_common_recv_msg()  argument
1063 		*ab = NULL;  in audit_log_common_recv_msg()
1067 	*ab = audit_log_start(NULL, GFP_KERNEL, msg_type);  in audit_log_common_recv_msg()
1068 	if (unlikely(!*ab))  in audit_log_common_recv_msg()
1070 	audit_log_format(*ab, "pid=%d uid=%u", pid, uid);  in audit_log_common_recv_msg()
1071 	audit_log_session_info(*ab);  in audit_log_common_recv_msg()
1072 	audit_log_task_context(*ab);  in audit_log_common_recv_msg()
1095 	struct audit_buffer *ab;  in audit_log_feature_change()  local
1099 	ab = audit_log_start(audit_context(), GFP_KERNEL, AUDIT_FEATURE_CHANGE);  in audit_log_feature_change()
1100 	if (!ab)  in audit_log_feature_change()
1102 	audit_log_task_info(ab, current);  in audit_log_feature_change()
1103 	audit_log_format(ab, " feature=%s old=%u new=%u old_lock=%u new_lock=%u res=%d",  in audit_log_feature_change()
1106 	audit_log_end(ab);  in audit_log_feature_change()
1184 	struct audit_buffer	*ab;  in audit_receive_msg()  local
1341 			audit_log_common_recv_msg(&ab, msg_type);  in audit_receive_msg()
1343 				audit_log_format(ab, " msg='%.*s'",  in audit_receive_msg()
1349 				audit_log_format(ab, " data=");  in audit_receive_msg()
1354 				audit_log_n_untrustedstring(ab, data, size);  in audit_receive_msg()
1356 			audit_log_end(ab);  in audit_receive_msg()
1364 			audit_log_common_recv_msg(&ab, AUDIT_CONFIG_CHANGE);  in audit_receive_msg()
1365 			audit_log_format(ab, " audit_enabled=%d res=0", audit_enabled);  in audit_receive_msg()
1366 			audit_log_end(ab);  in audit_receive_msg()
1376 		audit_log_common_recv_msg(&ab, AUDIT_CONFIG_CHANGE);  in audit_receive_msg()
1377 		audit_log_format(ab, " op=trim res=1");  in audit_receive_msg()
1378 		audit_log_end(ab);  in audit_receive_msg()
1406 		audit_log_common_recv_msg(&ab, AUDIT_CONFIG_CHANGE);  in audit_receive_msg()
1408 		audit_log_format(ab, " op=make_equiv old=");  in audit_receive_msg()
1409 		audit_log_untrustedstring(ab, old);  in audit_receive_msg()
1410 		audit_log_format(ab, " new=");  in audit_receive_msg()
1411 		audit_log_untrustedstring(ab, new);  in audit_receive_msg()
1412 		audit_log_format(ab, " res=%d", !err);  in audit_receive_msg()
1413 		audit_log_end(ab);  in audit_receive_msg()
1454 		struct audit_buffer	*ab;  in audit_receive_msg()  local
1474 		audit_log_common_recv_msg(&ab, AUDIT_CONFIG_CHANGE);  in audit_receive_msg()
1475 		audit_log_format(ab, " op=tty_set old-enabled=%d new-enabled=%d"  in audit_receive_msg()
1479 		audit_log_end(ab);  in audit_receive_msg()
1662 static void audit_buffer_free(struct audit_buffer *ab)  in audit_buffer_free()  argument
1664 	if (!ab)  in audit_buffer_free()
1667 	kfree_skb(ab->skb);  in audit_buffer_free()
1668 	kmem_cache_free(audit_buffer_cache, ab);  in audit_buffer_free()
1674 	struct audit_buffer *ab;  in audit_buffer_alloc()  local
1676 	ab = kmem_cache_alloc(audit_buffer_cache, gfp_mask);  in audit_buffer_alloc()
1677 	if (!ab)  in audit_buffer_alloc()
1680 	ab->skb = nlmsg_new(AUDIT_BUFSIZ, gfp_mask);  in audit_buffer_alloc()
1681 	if (!ab->skb)  in audit_buffer_alloc()
1683 	if (!nlmsg_put(ab->skb, 0, 0, type, 0, 0))  in audit_buffer_alloc()
1686 	ab->ctx = ctx;  in audit_buffer_alloc()
1687 	ab->gfp_mask = gfp_mask;  in audit_buffer_alloc()
1689 	return ab;  in audit_buffer_alloc()
1692 	audit_buffer_free(ab);  in audit_buffer_alloc()
1747 	struct audit_buffer *ab;  in audit_log_start()  local
1793 	ab = audit_buffer_alloc(ctx, gfp_mask, type);  in audit_log_start()
1794 	if (!ab) {  in audit_log_start()
1799 	audit_get_stamp(ab->ctx, &t, &serial);  in audit_log_start()
1800 	audit_log_format(ab, "audit(%llu.%03lu:%u): ",  in audit_log_start()
1803 	return ab;  in audit_log_start()
1814 static inline int audit_expand(struct audit_buffer *ab, int extra)  in audit_expand()  argument
1816 	struct sk_buff *skb = ab->skb;  in audit_expand()
1818 	int ret = pskb_expand_head(skb, 0, extra, ab->gfp_mask);  in audit_expand()
1836 static void audit_log_vformat(struct audit_buffer *ab, const char *fmt,  in audit_log_vformat()  argument
1843 	if (!ab)  in audit_log_vformat()
1846 	BUG_ON(!ab->skb);  in audit_log_vformat()
1847 	skb = ab->skb;  in audit_log_vformat()
1850 		avail = audit_expand(ab, AUDIT_BUFSIZ);  in audit_log_vformat()
1860 		avail = audit_expand(ab,  in audit_log_vformat()
1882 void audit_log_format(struct audit_buffer *ab, const char *fmt, ...)  in audit_log_format()  argument
1886 	if (!ab)  in audit_log_format()
1889 	audit_log_vformat(ab, fmt, args);  in audit_log_format()
1904 void audit_log_n_hex(struct audit_buffer *ab, const unsigned char *buf,  in audit_log_n_hex()  argument
1911 	if (!ab)  in audit_log_n_hex()
1914 	BUG_ON(!ab->skb);  in audit_log_n_hex()
1915 	skb = ab->skb;  in audit_log_n_hex()
1921 		avail = audit_expand(ab, new_len);  in audit_log_n_hex()
1937 void audit_log_n_string(struct audit_buffer *ab, const char *string,  in audit_log_n_string()  argument
1944 	if (!ab)  in audit_log_n_string()
1947 	BUG_ON(!ab->skb);  in audit_log_n_string()
1948 	skb = ab->skb;  in audit_log_n_string()
1952 		avail = audit_expand(ab, new_len);  in audit_log_n_string()
1994 void audit_log_n_untrustedstring(struct audit_buffer *ab, const char *string,  in audit_log_n_untrustedstring()  argument
1998 		audit_log_n_hex(ab, string, len);  in audit_log_n_untrustedstring()
2000 		audit_log_n_string(ab, string, len);  in audit_log_n_untrustedstring()
2011 void audit_log_untrustedstring(struct audit_buffer *ab, const char *string)  in audit_log_untrustedstring()  argument
2013 	audit_log_n_untrustedstring(ab, string, strlen(string));  in audit_log_untrustedstring()
2017 void audit_log_d_path(struct audit_buffer *ab, const char *prefix,  in audit_log_d_path()  argument
2023 		audit_log_format(ab, "%s", prefix);  in audit_log_d_path()
2026 	pathname = kmalloc(PATH_MAX+11, ab->gfp_mask);  in audit_log_d_path()
2028 		audit_log_string(ab, "<no_memory>");  in audit_log_d_path()
2034 		audit_log_string(ab, "<too_long>");  in audit_log_d_path()
2036 		audit_log_untrustedstring(ab, p);  in audit_log_d_path()
2040 void audit_log_session_info(struct audit_buffer *ab)  in audit_log_session_info()  argument
2045 	audit_log_format(ab, " auid=%u ses=%u", auid, sessionid);  in audit_log_session_info()
2048 void audit_log_key(struct audit_buffer *ab, char *key)  in audit_log_key()  argument
2050 	audit_log_format(ab, " key=");  in audit_log_key()
2052 		audit_log_untrustedstring(ab, key);  in audit_log_key()
2054 		audit_log_format(ab, "(null)");  in audit_log_key()
2057 void audit_log_cap(struct audit_buffer *ab, char *prefix, kernel_cap_t *cap)  in audit_log_cap()  argument
2061 	audit_log_format(ab, " %s=", prefix);  in audit_log_cap()
2063 		audit_log_format(ab, "%08x",  in audit_log_cap()
2068 static void audit_log_fcaps(struct audit_buffer *ab, struct audit_names *name)  in audit_log_fcaps()  argument
2070 	audit_log_cap(ab, "cap_fp", &name->fcap.permitted);  in audit_log_fcaps()
2071 	audit_log_cap(ab, "cap_fi", &name->fcap.inheritable);  in audit_log_fcaps()
2072 	audit_log_format(ab, " cap_fe=%d cap_fver=%x",  in audit_log_fcaps()
2123 	struct audit_buffer *ab;  in audit_log_name()  local
2124 	ab = audit_log_start(context, GFP_KERNEL, AUDIT_PATH);  in audit_log_name()
2125 	if (!ab)  in audit_log_name()
2128 	audit_log_format(ab, "item=%d", record_num);  in audit_log_name()
2131 		audit_log_d_path(ab, " name=", path);  in audit_log_name()
2136 			audit_log_format(ab, " name=");  in audit_log_name()
2137 			audit_log_untrustedstring(ab, n->name->name);  in audit_log_name()
2142 			audit_log_d_path(ab, " name=", &context->pwd);  in audit_log_name()
2146 			audit_log_format(ab, " name=");  in audit_log_name()
2147 			audit_log_n_untrustedstring(ab, n->name->name,  in audit_log_name()
2151 		audit_log_format(ab, " name=(null)");  in audit_log_name()
2154 		audit_log_format(ab, " inode=%lu"  in audit_log_name()
2170 			audit_log_format(ab, " osid=%u", n->osid);  in audit_log_name()
2174 			audit_log_format(ab, " obj=%s", ctx);  in audit_log_name()
2180 	audit_log_format(ab, " nametype=");  in audit_log_name()
2183 		audit_log_format(ab, "NORMAL");  in audit_log_name()
2186 		audit_log_format(ab, "PARENT");  in audit_log_name()
2189 		audit_log_format(ab, "DELETE");  in audit_log_name()
2192 		audit_log_format(ab, "CREATE");  in audit_log_name()
2195 		audit_log_format(ab, "UNKNOWN");  in audit_log_name()
2199 	audit_log_fcaps(ab, n);  in audit_log_name()
2200 	audit_log_end(ab);  in audit_log_name()
2203 int audit_log_task_context(struct audit_buffer *ab)  in audit_log_task_context()  argument
2221 	audit_log_format(ab, " subj=%s", ctx);  in audit_log_task_context()
2231 void audit_log_d_path_exe(struct audit_buffer *ab,  in audit_log_d_path_exe()  argument
2243 	audit_log_d_path(ab, " exe=", &exe_file->f_path);  in audit_log_d_path_exe()
2247 	audit_log_format(ab, " exe=(null)");  in audit_log_d_path_exe()
2267 void audit_log_task_info(struct audit_buffer *ab, struct task_struct *tsk)  in audit_log_task_info()  argument
2273 	if (!ab)  in audit_log_task_info()
2279 	audit_log_format(ab,  in audit_log_task_info()
2297 	audit_log_format(ab, " comm=");  in audit_log_task_info()
2298 	audit_log_untrustedstring(ab, get_task_comm(comm, tsk));  in audit_log_task_info()
2299 	audit_log_d_path_exe(ab, tsk->mm);  in audit_log_task_info()
2300 	audit_log_task_context(ab);  in audit_log_task_info()
2310 	struct audit_buffer *ab;  in audit_log_link_denied()  local
2316 	ab = audit_log_start(audit_context(), GFP_KERNEL, AUDIT_ANOM_LINK);  in audit_log_link_denied()
2317 	if (!ab)  in audit_log_link_denied()
2319 	audit_log_format(ab, "op=%s", operation);  in audit_log_link_denied()
2320 	audit_log_task_info(ab, current);  in audit_log_link_denied()
2321 	audit_log_format(ab, " res=0");  in audit_log_link_denied()
2322 	audit_log_end(ab);  in audit_log_link_denied()
2334 void audit_log_end(struct audit_buffer *ab)  in audit_log_end()  argument
2339 	if (!ab)  in audit_log_end()
2343 		skb = ab->skb;  in audit_log_end()
2344 		ab->skb = NULL;  in audit_log_end()
2357 	audit_buffer_free(ab);  in audit_log_end()
2375 	struct audit_buffer *ab;  in audit_log()  local
2378 	ab = audit_log_start(ctx, gfp_mask, type);  in audit_log()
2379 	if (ab) {  in audit_log()
2381 		audit_log_vformat(ab, fmt, args);  in audit_log()
2383 		audit_log_end(ab);  in audit_log()