Home
last modified time | relevance | path

Searched refs:audit_log_format (Results 1 – 25 of 38) sorted by relevance

12

/Linux-v5.4/security/
Dlsm_audit.c189 audit_log_format(ab, " %s=%pI6c", name1, addr); in print_ipv6_addr()
191 audit_log_format(ab, " %s=%d", name2, ntohs(port)); in print_ipv6_addr()
198 audit_log_format(ab, " %s=%pI4", name1, &addr); in print_ipv4_addr()
200 audit_log_format(ab, " %s=%d", name2, ntohs(port)); in print_ipv4_addr()
220 audit_log_format(ab, " pid=%d comm=", task_tgid_nr(current)); in dump_common_audit_data()
227 audit_log_format(ab, " key=%d ", a->u.ipc_id); in dump_common_audit_data()
230 audit_log_format(ab, " capability=%d ", a->u.cap); in dump_common_audit_data()
239 audit_log_format(ab, " dev="); in dump_common_audit_data()
241 audit_log_format(ab, " ino=%lu", inode->i_ino); in dump_common_audit_data()
252 audit_log_format(ab, " dev="); in dump_common_audit_data()
[all …]
/Linux-v5.4/security/apparmor/
Dmount.c30 audit_log_format(ab, "ro"); in audit_mnt_flags()
32 audit_log_format(ab, "rw"); in audit_mnt_flags()
34 audit_log_format(ab, ", nosuid"); in audit_mnt_flags()
36 audit_log_format(ab, ", nodev"); in audit_mnt_flags()
38 audit_log_format(ab, ", noexec"); in audit_mnt_flags()
40 audit_log_format(ab, ", sync"); in audit_mnt_flags()
42 audit_log_format(ab, ", remount"); in audit_mnt_flags()
44 audit_log_format(ab, ", mand"); in audit_mnt_flags()
46 audit_log_format(ab, ", dirsync"); in audit_mnt_flags()
48 audit_log_format(ab, ", noatime"); in audit_mnt_flags()
[all …]
Daudit.c60 audit_log_format(ab, "apparmor="); in audit_pre()
65 audit_log_format(ab, " operation="); in audit_pre()
70 audit_log_format(ab, " info="); in audit_pre()
73 audit_log_format(ab, " error=%d", aad(sa)->error); in audit_pre()
83 audit_log_format(ab, " namespace="); in audit_pre()
87 audit_log_format(ab, " profile="); in audit_pre()
90 audit_log_format(ab, " label="); in audit_pre()
97 audit_log_format(ab, " name="); in audit_pre()
Dipc.c50 audit_log_format(ab, " requested_mask="); in audit_ptrace_cb()
54 audit_log_format(ab, " denied_mask="); in audit_ptrace_cb()
58 audit_log_format(ab, " peer="); in audit_ptrace_cb()
167 audit_log_format(ab, " requested_mask="); in audit_signal_cb()
170 audit_log_format(ab, " denied_mask="); in audit_signal_cb()
175 audit_log_format(ab, "signal=unknown(%d)", in audit_signal_cb()
178 audit_log_format(ab, " signal=%s", sig_names[aad(sa)->signal]); in audit_signal_cb()
180 audit_log_format(ab, " signal=rtmin+%d", in audit_signal_cb()
182 audit_log_format(ab, " peer="); in audit_signal_cb()
Dnet.c75 audit_log_format(ab, " family="); in audit_net_cb()
79 audit_log_format(ab, "\"unknown(%d)\"", sa->u.net->family); in audit_net_cb()
80 audit_log_format(ab, " sock_type="); in audit_net_cb()
84 audit_log_format(ab, "\"unknown(%d)\"", aad(sa)->net.type); in audit_net_cb()
85 audit_log_format(ab, " protocol=%d", aad(sa)->net.protocol); in audit_net_cb()
88 audit_log_format(ab, " requested_mask="); in audit_net_cb()
93 audit_log_format(ab, " denied_mask="); in audit_net_cb()
99 audit_log_format(ab, " peer="); in audit_net_cb()
Dlib.c230 audit_log_format(ab, fmt, names[i]); in aa_audit_perm_names()
244 audit_log_format(ab, "\""); in aa_audit_perm_mask()
248 audit_log_format(ab, "%s", str); in aa_audit_perm_mask()
250 audit_log_format(ab, " "); in aa_audit_perm_mask()
254 audit_log_format(ab, "\""); in aa_audit_perm_mask()
267 audit_log_format(ab, " requested_mask="); in aa_audit_perms_cb()
273 audit_log_format(ab, "denied_mask="); in aa_audit_perms_cb()
278 audit_log_format(ab, " peer="); in aa_audit_perms_cb()
Dfile.c62 audit_log_format(ab, " requested_mask="); in file_audit_cb()
66 audit_log_format(ab, " denied_mask="); in file_audit_cb()
70 audit_log_format(ab, " fsuid=%d", in file_audit_cb()
72 audit_log_format(ab, " ouid=%d", in file_audit_cb()
77 audit_log_format(ab, " target="); in file_audit_cb()
81 audit_log_format(ab, " target="); in file_audit_cb()
Dresource.c34 audit_log_format(ab, " rlimit=%s value=%lu", in audit_cb()
37 audit_log_format(ab, " peer="); in audit_cb()
Dcapability.c48 audit_log_format(ab, " capname="); in audit_cb()
/Linux-v5.4/security/integrity/
Dintegrity_audit.c39 audit_log_format(ab, "pid=%d uid=%u auid=%u ses=%u", in integrity_audit_msg()
45 audit_log_format(ab, " op=%s cause=%s comm=", op, cause); in integrity_audit_msg()
48 audit_log_format(ab, " name="); in integrity_audit_msg()
52 audit_log_format(ab, " dev="); in integrity_audit_msg()
54 audit_log_format(ab, " ino=%lu", inode->i_ino); in integrity_audit_msg()
56 audit_log_format(ab, " res=%d", !result); in integrity_audit_msg()
/Linux-v5.4/kernel/
Dauditsc.c968 audit_log_format(ab, "opid=%d oauid=%d ouid=%d oses=%d", pid, in audit_log_pid_context()
973 audit_log_format(ab, " obj=(none)"); in audit_log_pid_context()
976 audit_log_format(ab, " obj=%s", ctx); in audit_log_pid_context()
980 audit_log_format(ab, " ocomm="); in audit_log_pid_context()
1024 audit_log_format(*ab, "argc=%d", context->execve.argc); in audit_log_execve_info()
1123 audit_log_format(*ab, "%s", abuf); in audit_log_execve_info()
1167 audit_log_format(ab, " %s=0", prefix); in audit_log_cap()
1170 audit_log_format(ab, " %s=", prefix); in audit_log_cap()
1172 audit_log_format(ab, "%08x", cap->cap[CAP_LAST_U32 - i]); in audit_log_cap()
1178 audit_log_format(ab, " cap_fe=? cap_fver=? cap_fp=? cap_fi=?"); in audit_log_fcaps()
[all …]
Daudit.c389 audit_log_format(ab, "op=set %s=%u old=%u ", function_name, new, old); in audit_log_config_change()
394 audit_log_format(ab, " res=%d", allow_changes); in audit_log_config_change()
1057 audit_log_format(*ab, "pid=%d uid=%u ", pid, uid); in audit_log_common_recv_msg()
1097 audit_log_format(ab, " feature=%s old=%u new=%u old_lock=%u new_lock=%u res=%d", in audit_log_feature_change()
1337 audit_log_format(ab, " msg='%.*s'", in audit_receive_msg()
1343 audit_log_format(ab, " data="); in audit_receive_msg()
1360 audit_log_format(ab, " op=%s audit_enabled=%d res=0", in audit_receive_msg()
1376 audit_log_format(ab, " op=trim res=1"); in audit_receive_msg()
1407 audit_log_format(ab, " op=make_equiv old="); in audit_receive_msg()
1409 audit_log_format(ab, " new="); in audit_receive_msg()
[all …]
Daudit_fsnotify.c125 audit_log_format(ab, " op=%s path=", op); in audit_mark_log_rule_change()
128 audit_log_format(ab, " list=%d res=1", rule->listnr); in audit_mark_log_rule_change()
/Linux-v5.4/net/netlabel/
Dnetlabel_addrlist.c318 audit_log_format(audit_buf, " netif=%s", dev); in netlbl_af4list_audit_addr()
319 audit_log_format(audit_buf, " %s=%pI4", dir, &addr); in netlbl_af4list_audit_addr()
326 audit_log_format(audit_buf, " %s_prefixlen=%d", dir, mask_len); in netlbl_af4list_audit_addr()
352 audit_log_format(audit_buf, " netif=%s", dev); in netlbl_af6list_audit_addr()
353 audit_log_format(audit_buf, " %s=%pI6", dir, addr); in netlbl_af6list_audit_addr()
365 audit_log_format(audit_buf, " %s_prefixlen=%d", dir, mask_len); in netlbl_af6list_audit_addr()
Dnetlabel_user.c97 audit_log_format(audit_buf, "netlabel: auid=%u ses=%u", in netlbl_audit_start_common()
105 audit_log_format(audit_buf, " subj=%s", secctx); in netlbl_audit_start_common()
Dnetlabel_domainhash.c219 audit_log_format(audit_buf, " nlbl_domain=%s", in netlbl_domhsh_audit_add()
244 audit_log_format(audit_buf, " nlbl_protocol=unlbl"); in netlbl_domhsh_audit_add()
248 audit_log_format(audit_buf, in netlbl_domhsh_audit_add()
254 audit_log_format(audit_buf, in netlbl_domhsh_audit_add()
259 audit_log_format(audit_buf, " res=%u", result == 0 ? 1 : 0); in netlbl_domhsh_audit_add()
601 audit_log_format(audit_buf, in netlbl_domhsh_remove_entry()
Dnetlabel_unlabeled.c443 audit_log_format(audit_buf, " sec_obj=%s", secctx); in netlbl_unlhsh_add()
446 audit_log_format(audit_buf, " res=%u", ret_val == 0 ? 1 : 0); in netlbl_unlhsh_add()
499 audit_log_format(audit_buf, " sec_obj=%s", secctx); in netlbl_unlhsh_remove_addr4()
502 audit_log_format(audit_buf, " res=%u", entry != NULL ? 1 : 0); in netlbl_unlhsh_remove_addr4()
560 audit_log_format(audit_buf, " sec_obj=%s", secctx); in netlbl_unlhsh_remove_addr6()
563 audit_log_format(audit_buf, " res=%u", entry != NULL ? 1 : 0); in netlbl_unlhsh_remove_addr6()
745 audit_log_format(audit_buf, in netlbl_unlabel_acceptflg_set()
/Linux-v5.4/net/netfilter/
Dxt_AUDIT.c40 audit_log_format(ab, " saddr=%pI4 daddr=%pI4 proto=%hhu", in audit_ip4()
60 audit_log_format(ab, " saddr=%pI6c daddr=%pI6c proto=%hhu", in audit_ip6()
78 audit_log_format(ab, "mark=%#x", skb->mark); in audit_tg()
100 audit_log_format(ab, " saddr=? daddr=? proto=-1"); in audit_tg()
Dnft_log.c38 audit_log_format(ab, " saddr=%pI4 daddr=%pI4 proto=%hhu", in audit_ip4()
58 audit_log_format(ab, " saddr=%pI6c daddr=%pI6c proto=%hhu", in audit_ip6()
77 audit_log_format(ab, "mark=%#x", skb->mark); in nft_log_eval_audit()
99 audit_log_format(ab, " saddr=? daddr=? proto=-1"); in nft_log_eval_audit()
/Linux-v5.4/security/selinux/
Davc.c671 audit_log_format(ab, "avc: %s ", sad->denied ? "denied" : "granted"); in avc_audit_pre_callback()
674 audit_log_format(ab, " null"); in avc_audit_pre_callback()
680 audit_log_format(ab, " {"); in avc_audit_pre_callback()
685 audit_log_format(ab, " %s", perms[i]); in avc_audit_pre_callback()
693 audit_log_format(ab, " 0x%x", av); in avc_audit_pre_callback()
695 audit_log_format(ab, " } for "); in avc_audit_pre_callback()
715 audit_log_format(ab, " ssid=%d", sad->ssid); in avc_audit_post_callback()
717 audit_log_format(ab, " scontext=%s", scontext); in avc_audit_post_callback()
724 audit_log_format(ab, " tsid=%d", sad->tsid); in avc_audit_post_callback()
726 audit_log_format(ab, " tcontext=%s", scontext); in avc_audit_post_callback()
[all …]
/Linux-v5.4/security/smack/
Dsmack_access.c316 audit_log_format(ab, "lsm=SMACK fn=%s action=%s", in smack_log_callback()
319 audit_log_format(ab, " subject="); in smack_log_callback()
321 audit_log_format(ab, " object="); in smack_log_callback()
324 audit_log_format(ab, " labels_differ"); in smack_log_callback()
326 audit_log_format(ab, " requested=%s", sad->request); in smack_log_callback()
/Linux-v5.4/security/integrity/evm/
Devm_secfs.c215 audit_log_format(ab, "xattr="); in evm_write_xattrs()
249 audit_log_format(ab, " res=0"); in evm_write_xattrs()
253 audit_log_format(ab, " res=%d", err); in evm_write_xattrs()
/Linux-v5.4/drivers/tty/
Dtty_audit.c73 audit_log_format(ab, "%s pid=%u uid=%u auid=%u ses=%u major=%d" in tty_audit_log()
78 audit_log_format(ab, " data="); in tty_audit_log()
/Linux-v5.4/security/integrity/ima/
Dima_api.c361 audit_log_format(ab, "file="); in ima_audit_measurement()
363 audit_log_format(ab, " hash=\"%s:%s\"", algo_name, hash); in ima_audit_measurement()
/Linux-v5.4/net/xfrm/
Dxfrm_state.c2594 audit_log_format(audit_buf, " sec_alg=%u sec_doi=%u sec_obj=%s", in xfrm_audit_helper_sainfo()
2599 audit_log_format(audit_buf, " src=%pI4 dst=%pI4", in xfrm_audit_helper_sainfo()
2603 audit_log_format(audit_buf, " src=%pI6 dst=%pI6", in xfrm_audit_helper_sainfo()
2608 audit_log_format(audit_buf, " spi=%u(0x%x)", spi, spi); in xfrm_audit_helper_sainfo()
2620 audit_log_format(audit_buf, " src=%pI4 dst=%pI4", in xfrm_audit_helper_pktinfo()
2625 audit_log_format(audit_buf, in xfrm_audit_helper_pktinfo()
2644 audit_log_format(audit_buf, " res=%u", result); in xfrm_audit_state_add()
2658 audit_log_format(audit_buf, " res=%u", result); in xfrm_audit_state_delete()
2676 audit_log_format(audit_buf, " spi=%u(0x%x)", spi, spi); in xfrm_audit_state_replay_overflow()
2692 audit_log_format(audit_buf, " spi=%u(0x%x) seqno=%u", in xfrm_audit_state_replay()
[all …]

12