Home
last modified time | relevance | path

Searched refs:audit_log_format (Results 1 – 25 of 38) sorted by relevance

12

/Linux-v4.19/security/
Dlsm_audit.c192 audit_log_format(ab, " %s=%pI6c", name1, addr); in print_ipv6_addr()
194 audit_log_format(ab, " %s=%d", name2, ntohs(port)); in print_ipv6_addr()
201 audit_log_format(ab, " %s=%pI4", name1, &addr); in print_ipv4_addr()
203 audit_log_format(ab, " %s=%d", name2, ntohs(port)); in print_ipv4_addr()
223 audit_log_format(ab, " pid=%d comm=", task_tgid_nr(current)); in dump_common_audit_data()
230 audit_log_format(ab, " key=%d ", a->u.ipc_id); in dump_common_audit_data()
233 audit_log_format(ab, " capability=%d ", a->u.cap); in dump_common_audit_data()
242 audit_log_format(ab, " dev="); in dump_common_audit_data()
244 audit_log_format(ab, " ino=%lu", inode->i_ino); in dump_common_audit_data()
255 audit_log_format(ab, " dev="); in dump_common_audit_data()
[all …]
/Linux-v4.19/security/apparmor/
Dmount.c33 audit_log_format(ab, "ro"); in audit_mnt_flags()
35 audit_log_format(ab, "rw"); in audit_mnt_flags()
37 audit_log_format(ab, ", nosuid"); in audit_mnt_flags()
39 audit_log_format(ab, ", nodev"); in audit_mnt_flags()
41 audit_log_format(ab, ", noexec"); in audit_mnt_flags()
43 audit_log_format(ab, ", sync"); in audit_mnt_flags()
45 audit_log_format(ab, ", remount"); in audit_mnt_flags()
47 audit_log_format(ab, ", mand"); in audit_mnt_flags()
49 audit_log_format(ab, ", dirsync"); in audit_mnt_flags()
51 audit_log_format(ab, ", noatime"); in audit_mnt_flags()
[all …]
Dnet.c78 audit_log_format(ab, " family="); in audit_net_cb()
82 audit_log_format(ab, "\"unknown(%d)\"", sa->u.net->family); in audit_net_cb()
83 audit_log_format(ab, " sock_type="); in audit_net_cb()
87 audit_log_format(ab, "\"unknown(%d)\"", aad(sa)->net.type); in audit_net_cb()
88 audit_log_format(ab, " protocol=%d", aad(sa)->net.protocol); in audit_net_cb()
91 audit_log_format(ab, " requested_mask="); in audit_net_cb()
96 audit_log_format(ab, " denied_mask="); in audit_net_cb()
102 audit_log_format(ab, " peer="); in audit_net_cb()
Daudit.c64 audit_log_format(ab, "apparmor="); in audit_pre()
69 audit_log_format(ab, " operation="); in audit_pre()
74 audit_log_format(ab, " info="); in audit_pre()
77 audit_log_format(ab, " error=%d", aad(sa)->error); in audit_pre()
87 audit_log_format(ab, " namespace="); in audit_pre()
91 audit_log_format(ab, " profile="); in audit_pre()
94 audit_log_format(ab, " label="); in audit_pre()
101 audit_log_format(ab, " name="); in audit_pre()
Dipc.c54 audit_log_format(ab, " requested_mask="); in audit_ptrace_cb()
58 audit_log_format(ab, " denied_mask="); in audit_ptrace_cb()
62 audit_log_format(ab, " peer="); in audit_ptrace_cb()
170 audit_log_format(ab, " requested_mask="); in audit_signal_cb()
173 audit_log_format(ab, " denied_mask="); in audit_signal_cb()
178 audit_log_format(ab, "signal=unknown(%d)", in audit_signal_cb()
181 audit_log_format(ab, " signal=%s", sig_names[aad(sa)->signal]); in audit_signal_cb()
183 audit_log_format(ab, " signal=rtmin+%d", in audit_signal_cb()
185 audit_log_format(ab, " peer="); in audit_signal_cb()
Dlib.c232 audit_log_format(ab, fmt, names[i]); in aa_audit_perm_names()
246 audit_log_format(ab, "\""); in aa_audit_perm_mask()
250 audit_log_format(ab, "%s", str); in aa_audit_perm_mask()
252 audit_log_format(ab, " "); in aa_audit_perm_mask()
256 audit_log_format(ab, "\""); in aa_audit_perm_mask()
269 audit_log_format(ab, " requested_mask="); in aa_audit_perms_cb()
275 audit_log_format(ab, "denied_mask="); in aa_audit_perms_cb()
280 audit_log_format(ab, " peer="); in aa_audit_perms_cb()
Dfile.c66 audit_log_format(ab, " requested_mask="); in file_audit_cb()
70 audit_log_format(ab, " denied_mask="); in file_audit_cb()
74 audit_log_format(ab, " fsuid=%d", in file_audit_cb()
76 audit_log_format(ab, " ouid=%d", in file_audit_cb()
81 audit_log_format(ab, " target="); in file_audit_cb()
85 audit_log_format(ab, " target="); in file_audit_cb()
Dresource.c38 audit_log_format(ab, " rlimit=%s value=%lu", in audit_cb()
41 audit_log_format(ab, " peer="); in audit_cb()
Dcapability.c52 audit_log_format(ab, " capname="); in audit_cb()
/Linux-v4.19/security/integrity/
Dintegrity_audit.c42 audit_log_format(ab, "pid=%d uid=%u auid=%u ses=%u", in integrity_audit_msg()
48 audit_log_format(ab, " op=%s cause=%s comm=", op, cause); in integrity_audit_msg()
51 audit_log_format(ab, " name="); in integrity_audit_msg()
55 audit_log_format(ab, " dev="); in integrity_audit_msg()
57 audit_log_format(ab, " ino=%lu", inode->i_ino); in integrity_audit_msg()
59 audit_log_format(ab, " res=%d", !result); in integrity_audit_msg()
/Linux-v4.19/kernel/
Daudit.c403 audit_log_format(ab, "%s=%u old=%u", function_name, new, old); in audit_log_config_change()
408 audit_log_format(ab, " res=%d", allow_changes); in audit_log_config_change()
1070 audit_log_format(*ab, "pid=%d uid=%u", pid, uid); in audit_log_common_recv_msg()
1103 audit_log_format(ab, " feature=%s old=%u new=%u old_lock=%u new_lock=%u res=%d", in audit_log_feature_change()
1343 audit_log_format(ab, " msg='%.*s'", in audit_receive_msg()
1349 audit_log_format(ab, " data="); in audit_receive_msg()
1365 audit_log_format(ab, " audit_enabled=%d res=0", audit_enabled); in audit_receive_msg()
1377 audit_log_format(ab, " op=trim res=1"); in audit_receive_msg()
1408 audit_log_format(ab, " op=make_equiv old="); in audit_receive_msg()
1410 audit_log_format(ab, " new="); in audit_receive_msg()
[all …]
Dauditsc.c990 audit_log_format(ab, "opid=%d oauid=%d ouid=%d oses=%d", pid, in audit_log_pid_context()
995 audit_log_format(ab, " obj=(none)"); in audit_log_pid_context()
998 audit_log_format(ab, " obj=%s", ctx); in audit_log_pid_context()
1002 audit_log_format(ab, " ocomm="); in audit_log_pid_context()
1046 audit_log_format(*ab, "argc=%d", context->execve.argc); in audit_log_execve_info()
1145 audit_log_format(*ab, "%s", abuf); in audit_log_execve_info()
1195 audit_log_format(ab, "nargs=%d", nargs); in show_special()
1197 audit_log_format(ab, " a%d=%lx", i, in show_special()
1203 audit_log_format(ab, "ouid=%u ogid=%u mode=%#ho", in show_special()
1211 audit_log_format(ab, " osid=%u", osid); in show_special()
[all …]
Daudit_fsnotify.c133 audit_log_format(ab, "auid=%u ses=%u op=%s", in audit_mark_log_rule_change()
136 audit_log_format(ab, " path="); in audit_mark_log_rule_change()
139 audit_log_format(ab, " list=%d res=1", rule->listnr); in audit_mark_log_rule_change()
Daudit_watch.c248 audit_log_format(ab, "auid=%u ses=%u op=%s", in audit_watch_log_rule_change()
251 audit_log_format(ab, " path="); in audit_watch_log_rule_change()
254 audit_log_format(ab, " list=%d res=1", r->listnr); in audit_watch_log_rule_change()
/Linux-v4.19/net/netlabel/
Dnetlabel_addrlist.c332 audit_log_format(audit_buf, " netif=%s", dev); in netlbl_af4list_audit_addr()
333 audit_log_format(audit_buf, " %s=%pI4", dir, &addr); in netlbl_af4list_audit_addr()
340 audit_log_format(audit_buf, " %s_prefixlen=%d", dir, mask_len); in netlbl_af4list_audit_addr()
366 audit_log_format(audit_buf, " netif=%s", dev); in netlbl_af6list_audit_addr()
367 audit_log_format(audit_buf, " %s=%pI6", dir, addr); in netlbl_af6list_audit_addr()
379 audit_log_format(audit_buf, " %s_prefixlen=%d", dir, mask_len); in netlbl_af6list_audit_addr()
Dnetlabel_user.c111 audit_log_format(audit_buf, "netlabel: auid=%u ses=%u", in netlbl_audit_start_common()
119 audit_log_format(audit_buf, " subj=%s", secctx); in netlbl_audit_start_common()
Dnetlabel_domainhash.c233 audit_log_format(audit_buf, " nlbl_domain=%s", in netlbl_domhsh_audit_add()
258 audit_log_format(audit_buf, " nlbl_protocol=unlbl"); in netlbl_domhsh_audit_add()
262 audit_log_format(audit_buf, in netlbl_domhsh_audit_add()
268 audit_log_format(audit_buf, in netlbl_domhsh_audit_add()
273 audit_log_format(audit_buf, " res=%u", result == 0 ? 1 : 0); in netlbl_domhsh_audit_add()
615 audit_log_format(audit_buf, in netlbl_domhsh_remove_entry()
Dnetlabel_unlabeled.c457 audit_log_format(audit_buf, " sec_obj=%s", secctx); in netlbl_unlhsh_add()
460 audit_log_format(audit_buf, " res=%u", ret_val == 0 ? 1 : 0); in netlbl_unlhsh_add()
513 audit_log_format(audit_buf, " sec_obj=%s", secctx); in netlbl_unlhsh_remove_addr4()
516 audit_log_format(audit_buf, " res=%u", entry != NULL ? 1 : 0); in netlbl_unlhsh_remove_addr4()
574 audit_log_format(audit_buf, " sec_obj=%s", secctx); in netlbl_unlhsh_remove_addr6()
577 audit_log_format(audit_buf, " res=%u", entry != NULL ? 1 : 0); in netlbl_unlhsh_remove_addr6()
759 audit_log_format(audit_buf, in netlbl_unlabel_acceptflg_set()
/Linux-v4.19/net/netfilter/
Dxt_AUDIT.c43 audit_log_format(ab, " saddr=%pI4 daddr=%pI4 proto=%hhu", in audit_ip4()
63 audit_log_format(ab, " saddr=%pI6c daddr=%pI6c proto=%hhu", in audit_ip6()
81 audit_log_format(ab, "mark=%#x", skb->mark); in audit_tg()
103 audit_log_format(ab, " saddr=? daddr=? proto=-1"); in audit_tg()
Dnft_log.c41 audit_log_format(ab, " saddr=%pI4 daddr=%pI4 proto=%hhu", in audit_ip4()
61 audit_log_format(ab, " saddr=%pI6c daddr=%pI6c proto=%hhu", in audit_ip6()
80 audit_log_format(ab, "mark=%#x", skb->mark); in nft_log_eval_audit()
102 audit_log_format(ab, " saddr=? daddr=? proto=-1"); in nft_log_eval_audit()
/Linux-v4.19/security/integrity/evm/
Devm_secfs.c225 audit_log_format(ab, "locked"); in evm_write_xattrs()
231 audit_log_format(ab, "xattr="); in evm_write_xattrs()
252 audit_log_format(ab, " res=0"); in evm_write_xattrs()
256 audit_log_format(ab, " res=%d", err); in evm_write_xattrs()
/Linux-v4.19/security/selinux/
Davc.c143 audit_log_format(ab, " null"); in avc_dump_av()
150 audit_log_format(ab, " {"); in avc_dump_av()
155 audit_log_format(ab, " %s", perms[i]); in avc_dump_av()
163 audit_log_format(ab, " 0x%x", av); in avc_dump_av()
165 audit_log_format(ab, " }"); in avc_dump_av()
183 audit_log_format(ab, "ssid=%d", ssid); in avc_dump_query()
185 audit_log_format(ab, "scontext=%s", scontext); in avc_dump_query()
191 audit_log_format(ab, " tsid=%d", tsid); in avc_dump_query()
193 audit_log_format(ab, " tcontext=%s", scontext); in avc_dump_query()
198 audit_log_format(ab, " tclass=%s", secclass_map[tclass-1].name); in avc_dump_query()
[all …]
/Linux-v4.19/security/smack/
Dsmack_access.c320 audit_log_format(ab, "lsm=SMACK fn=%s action=%s", in smack_log_callback()
323 audit_log_format(ab, " subject="); in smack_log_callback()
325 audit_log_format(ab, " object="); in smack_log_callback()
328 audit_log_format(ab, " labels_differ"); in smack_log_callback()
330 audit_log_format(ab, " requested=%s", sad->request); in smack_log_callback()
/Linux-v4.19/drivers/tty/
Dtty_audit.c74 audit_log_format(ab, "%s pid=%u uid=%u auid=%u ses=%u major=%d" in tty_audit_log()
79 audit_log_format(ab, " data="); in tty_audit_log()
/Linux-v4.19/security/integrity/ima/
Dima_api.c334 audit_log_format(ab, "file="); in ima_audit_measurement()
336 audit_log_format(ab, " hash=\"%s:%s\"", algo_name, hash); in ima_audit_measurement()

12