Home
last modified time | relevance | path

Searched refs:audit_log_format (Results 1 – 25 of 41) sorted by relevance

12

/Linux-v6.6/security/
Dlsm_audit.c177 audit_log_format(ab, " %s=%pI6c", name1, addr); in print_ipv6_addr()
179 audit_log_format(ab, " %s=%d", name2, ntohs(port)); in print_ipv6_addr()
186 audit_log_format(ab, " %s=%pI4", name1, &addr); in print_ipv4_addr()
188 audit_log_format(ab, " %s=%d", name2, ntohs(port)); in print_ipv4_addr()
209 audit_log_format(ab, " pid=%d comm=", task_tgid_nr(current)); in dump_common_audit_data()
216 audit_log_format(ab, " ipc_key=%d ", a->u.ipc_id); in dump_common_audit_data()
219 audit_log_format(ab, " capability=%d ", a->u.cap); in dump_common_audit_data()
228 audit_log_format(ab, " dev="); in dump_common_audit_data()
230 audit_log_format(ab, " ino=%lu", inode->i_ino); in dump_common_audit_data()
241 audit_log_format(ab, " dev="); in dump_common_audit_data()
[all …]
/Linux-v6.6/security/apparmor/
Dmount.c30 audit_log_format(ab, "ro"); in audit_mnt_flags()
32 audit_log_format(ab, "rw"); in audit_mnt_flags()
34 audit_log_format(ab, ", nosuid"); in audit_mnt_flags()
36 audit_log_format(ab, ", nodev"); in audit_mnt_flags()
38 audit_log_format(ab, ", noexec"); in audit_mnt_flags()
40 audit_log_format(ab, ", sync"); in audit_mnt_flags()
42 audit_log_format(ab, ", remount"); in audit_mnt_flags()
44 audit_log_format(ab, ", mand"); in audit_mnt_flags()
46 audit_log_format(ab, ", dirsync"); in audit_mnt_flags()
48 audit_log_format(ab, ", noatime"); in audit_mnt_flags()
[all …]
Daudit.c97 audit_log_format(ab, "apparmor=\"%s\"", in audit_pre()
102 audit_log_format(ab, " operation=\"%s\"", aad(sa)->op); in audit_pre()
106 audit_log_format(ab, " class=\"%s\"", in audit_pre()
112 audit_log_format(ab, " info=\"%s\"", aad(sa)->info); in audit_pre()
114 audit_log_format(ab, " error=%d", aad(sa)->error); in audit_pre()
124 audit_log_format(ab, " namespace="); in audit_pre()
128 audit_log_format(ab, " profile="); in audit_pre()
131 audit_log_format(ab, " label="); in audit_pre()
138 audit_log_format(ab, " name="); in audit_pre()
Dipc.c57 audit_log_format(ab, " requested_mask=\"%s\"", in audit_signal_cb()
60 audit_log_format(ab, " denied_mask=\"%s\"", in audit_signal_cb()
65 audit_log_format(ab, "signal=unknown(%d)", in audit_signal_cb()
68 audit_log_format(ab, " signal=%s", sig_names[aad(sa)->signal]); in audit_signal_cb()
70 audit_log_format(ab, " signal=rtmin+%d", in audit_signal_cb()
72 audit_log_format(ab, " peer="); in audit_signal_cb()
Dnet.c76 audit_log_format(ab, " family=\"%s\"", in audit_net_cb()
79 audit_log_format(ab, " family=\"unknown(%d)\"", in audit_net_cb()
82 audit_log_format(ab, " sock_type=\"%s\"", in audit_net_cb()
85 audit_log_format(ab, " sock_type=\"unknown(%d)\"", in audit_net_cb()
87 audit_log_format(ab, " protocol=%d", aad(sa)->net.protocol); in audit_net_cb()
90 audit_log_format(ab, " requested_mask="); in audit_net_cb()
95 audit_log_format(ab, " denied_mask="); in audit_net_cb()
101 audit_log_format(ab, " peer="); in audit_net_cb()
Dlib.c249 audit_log_format(ab, fmt, names[i]); in aa_audit_perm_names()
263 audit_log_format(ab, "\""); in aa_audit_perm_mask()
267 audit_log_format(ab, "%s", str); in aa_audit_perm_mask()
269 audit_log_format(ab, " "); in aa_audit_perm_mask()
273 audit_log_format(ab, "\""); in aa_audit_perm_mask()
286 audit_log_format(ab, " requested_mask="); in aa_audit_perms_cb()
292 audit_log_format(ab, "denied_mask="); in aa_audit_perms_cb()
297 audit_log_format(ab, " peer="); in aa_audit_perms_cb()
Dtask.c213 audit_log_format(ab, " requested_mask=\"%s\"", in audit_ptrace_cb()
217 audit_log_format(ab, " denied_mask=\"%s\"", in audit_ptrace_cb()
221 audit_log_format(ab, " peer="); in audit_ptrace_cb()
Dfile.c53 audit_log_format(ab, " requested_mask=\"%s\"", str); in file_audit_cb()
58 audit_log_format(ab, " denied_mask=\"%s\"", str); in file_audit_cb()
61 audit_log_format(ab, " fsuid=%d", in file_audit_cb()
63 audit_log_format(ab, " ouid=%d", in file_audit_cb()
68 audit_log_format(ab, " target="); in file_audit_cb()
72 audit_log_format(ab, " target="); in file_audit_cb()
Dresource.c34 audit_log_format(ab, " rlimit=%s value=%lu", in audit_cb()
37 audit_log_format(ab, " peer="); in audit_cb()
/Linux-v6.6/security/integrity/
Dintegrity_audit.c50 audit_log_format(ab, "pid=%d uid=%u auid=%u ses=%u", in integrity_audit_message()
56 audit_log_format(ab, " op=%s cause=%s comm=", op, cause); in integrity_audit_message()
59 audit_log_format(ab, " name="); in integrity_audit_message()
63 audit_log_format(ab, " dev="); in integrity_audit_message()
65 audit_log_format(ab, " ino=%lu", inode->i_ino); in integrity_audit_message()
67 audit_log_format(ab, " res=%d errno=%d", !result, errno); in integrity_audit_message()
/Linux-v6.6/drivers/md/
Ddm-audit.c32 audit_log_format(ab, "module=%s op=%s", dm_msg_prefix, op); in dm_audit_log_start()
50 audit_log_format(ab, " dev=%d:%d error_msg='%s'", dev_major, in dm_audit_log_ti()
57 audit_log_format(ab, " dev=%d:%d sector=?", dev_major, in dm_audit_log_ti()
64 audit_log_format(ab, " res=%d", result); in dm_audit_log_ti()
80 audit_log_format(ab, " dev=%d:%d sector=%llu res=%d", in dm_audit_log_bio()
/Linux-v6.6/kernel/
Dauditsc.c1106 audit_log_format(ab, "opid=%d oauid=%d ouid=%d oses=%d", pid, in audit_log_pid_context()
1111 audit_log_format(ab, " obj=(none)"); in audit_log_pid_context()
1114 audit_log_format(ab, " obj=%s", ctx); in audit_log_pid_context()
1118 audit_log_format(ab, " ocomm="); in audit_log_pid_context()
1162 audit_log_format(*ab, "argc=%d", context->execve.argc); in audit_log_execve_info()
1261 audit_log_format(*ab, "%s", abuf); in audit_log_execve_info()
1303 audit_log_format(ab, " %s=0", prefix); in audit_log_cap()
1306 audit_log_format(ab, " %s=%016llx", prefix, cap->val); in audit_log_cap()
1312 audit_log_format(ab, " cap_fe=? cap_fver=? cap_fp=? cap_fi=?"); in audit_log_fcaps()
1317 audit_log_format(ab, " cap_fe=%d cap_fver=%x cap_frootid=%d", in audit_log_fcaps()
[all …]
Daudit.c392 audit_log_format(ab, "op=set %s=%u old=%u ", function_name, new, old); in audit_log_config_change()
397 audit_log_format(ab, " res=%d", allow_changes); in audit_log_config_change()
1089 audit_log_format(*ab, "pid=%d uid=%u ", pid, uid); in audit_log_common_recv_msg()
1129 audit_log_format(ab, " feature=%s old=%u new=%u old_lock=%u new_lock=%u res=%d", in audit_log_feature_change()
1385 audit_log_format(ab, " msg='%.*s'", in audit_receive_msg()
1389 audit_log_format(ab, " data="); in audit_receive_msg()
1404 audit_log_format(ab, " op=%s audit_enabled=%d res=0", in audit_receive_msg()
1420 audit_log_format(ab, " op=trim res=1"); in audit_receive_msg()
1451 audit_log_format(ab, " op=make_equiv old="); in audit_receive_msg()
1453 audit_log_format(ab, " new="); in audit_receive_msg()
[all …]
Daudit_fsnotify.c126 audit_log_format(ab, " op=%s path=", op); in audit_mark_log_rule_change()
129 audit_log_format(ab, " list=%d res=1", rule->listnr); in audit_mark_log_rule_change()
/Linux-v6.6/net/netlabel/
Dnetlabel_addrlist.c318 audit_log_format(audit_buf, " netif=%s", dev); in netlbl_af4list_audit_addr()
319 audit_log_format(audit_buf, " %s=%pI4", dir, &addr); in netlbl_af4list_audit_addr()
326 audit_log_format(audit_buf, " %s_prefixlen=%d", dir, mask_len); in netlbl_af4list_audit_addr()
352 audit_log_format(audit_buf, " netif=%s", dev); in netlbl_af6list_audit_addr()
353 audit_log_format(audit_buf, " %s=%pI6", dir, addr); in netlbl_af6list_audit_addr()
365 audit_log_format(audit_buf, " %s_prefixlen=%d", dir, mask_len); in netlbl_af6list_audit_addr()
Dnetlabel_user.c97 audit_log_format(audit_buf, "netlabel: auid=%u ses=%u", in netlbl_audit_start_common()
105 audit_log_format(audit_buf, " subj=%s", secctx); in netlbl_audit_start_common()
Dnetlabel_domainhash.c221 audit_log_format(audit_buf, " nlbl_domain=%s", in netlbl_domhsh_audit_add()
246 audit_log_format(audit_buf, " nlbl_protocol=unlbl"); in netlbl_domhsh_audit_add()
250 audit_log_format(audit_buf, in netlbl_domhsh_audit_add()
256 audit_log_format(audit_buf, in netlbl_domhsh_audit_add()
261 audit_log_format(audit_buf, " res=%u", result == 0 ? 1 : 0); in netlbl_domhsh_audit_add()
614 audit_log_format(audit_buf, in netlbl_domhsh_remove_entry()
Dnetlabel_unlabeled.c444 audit_log_format(audit_buf, " sec_obj=%s", secctx); in netlbl_unlhsh_add()
447 audit_log_format(audit_buf, " res=%u", ret_val == 0 ? 1 : 0); in netlbl_unlhsh_add()
499 audit_log_format(audit_buf, " sec_obj=%s", secctx); in netlbl_unlhsh_remove_addr4()
502 audit_log_format(audit_buf, " res=%u", entry != NULL ? 1 : 0); in netlbl_unlhsh_remove_addr4()
559 audit_log_format(audit_buf, " sec_obj=%s", secctx); in netlbl_unlhsh_remove_addr6()
562 audit_log_format(audit_buf, " res=%u", entry != NULL ? 1 : 0); in netlbl_unlhsh_remove_addr6()
744 audit_log_format(audit_buf, in netlbl_unlabel_acceptflg_set()
/Linux-v6.6/net/netfilter/
Dxt_AUDIT.c40 audit_log_format(ab, " saddr=%pI4 daddr=%pI4 proto=%hhu", in audit_ip4()
60 audit_log_format(ab, " saddr=%pI6c daddr=%pI6c proto=%hhu", in audit_ip6()
78 audit_log_format(ab, "mark=%#x", skb->mark); in audit_tg()
100 audit_log_format(ab, " saddr=? daddr=? proto=-1"); in audit_tg()
Dnft_log.c38 audit_log_format(ab, " saddr=%pI4 daddr=%pI4 proto=%hhu", in audit_ip4()
58 audit_log_format(ab, " saddr=%pI6c daddr=%pI6c proto=%hhu", in audit_ip6()
77 audit_log_format(ab, "mark=%#x", skb->mark); in nft_log_eval_audit()
99 audit_log_format(ab, " saddr=? daddr=? proto=-1"); in nft_log_eval_audit()
/Linux-v6.6/security/selinux/
Davc.c661 audit_log_format(ab, "avc: %s ", sad->denied ? "denied" : "granted"); in avc_audit_pre_callback()
664 audit_log_format(ab, " null"); in avc_audit_pre_callback()
670 audit_log_format(ab, " {"); in avc_audit_pre_callback()
675 audit_log_format(ab, " %s", perms[i]); in avc_audit_pre_callback()
683 audit_log_format(ab, " 0x%x", av); in avc_audit_pre_callback()
685 audit_log_format(ab, " } for "); in avc_audit_pre_callback()
708 audit_log_format(ab, " ssid=%d", sad->ssid); in avc_audit_post_callback()
710 audit_log_format(ab, " scontext=%s", scontext); in avc_audit_post_callback()
715 audit_log_format(ab, " tsid=%d", sad->tsid); in avc_audit_post_callback()
717 audit_log_format(ab, " tcontext=%s", tcontext); in avc_audit_post_callback()
[all …]
/Linux-v6.6/security/smack/
Dsmack_access.c315 audit_log_format(ab, "lsm=SMACK fn=%s action=%s", in smack_log_callback()
318 audit_log_format(ab, " subject="); in smack_log_callback()
320 audit_log_format(ab, " object="); in smack_log_callback()
323 audit_log_format(ab, " labels_differ"); in smack_log_callback()
325 audit_log_format(ab, " requested=%s", sad->request); in smack_log_callback()
/Linux-v6.6/security/integrity/evm/
Devm_secfs.c222 audit_log_format(ab, "xattr="); in evm_write_xattrs()
267 audit_log_format(ab, " res=0"); in evm_write_xattrs()
271 audit_log_format(ab, " res=%d", (err < 0) ? err : 0); in evm_write_xattrs()
/Linux-v6.6/drivers/tty/
Dtty_audit.c75 audit_log_format(ab, "%s pid=%u uid=%u auid=%u ses=%u major=%d minor=%d comm=", in tty_audit_log()
80 audit_log_format(ab, " data="); in tty_audit_log()
/Linux-v6.6/security/integrity/ima/
Dima_api.c404 audit_log_format(ab, "file="); in ima_audit_measurement()
406 audit_log_format(ab, " hash=\"%s:%s\"", algo_name, hash); in ima_audit_measurement()

12