diff options
| author | Jeff Vander Stoep <jeffv@google.com> | 2015-04-04 16:15:54 -0700 |
|---|---|---|
| committer | Moyster <oysterized@gmail.com> | 2016-09-10 16:58:35 +0200 |
| commit | 9bba34daf042ec4cc118c61eba6be910dcba0174 (patch) | |
| tree | f092640ae24cf3719b68111284b061b90457cae8 /security | |
| parent | ec3bb9c30fda6f9313e119d5c9fcb8a7097c677b (diff) | |
security: lsm_audit: add ioctl specific auditing
Add information about ioctl calls to the LSM audit data. Log the
file path and command number.
Bug: 18087110
Change-Id: Idbbd106db6226683cb30022d9e8f6f3b8fab7f84
Signed-off-by: Jeff Vander Stoep <jeffv@google.com>
Diffstat (limited to 'security')
| -rw-r--r-- | security/lsm_audit.c | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/security/lsm_audit.c b/security/lsm_audit.c index 8d8d97dbb..8f6b8e8a4 100644 --- a/security/lsm_audit.c +++ b/security/lsm_audit.c @@ -245,6 +245,21 @@ static void dump_common_audit_data(struct audit_buffer *ab, } break; } + case LSM_AUDIT_DATA_IOCTL_OP: { + struct inode *inode; + + audit_log_d_path(ab, " path=", &a->u.op->path); + + inode = a->u.op->path.dentry->d_inode; + if (inode) { + audit_log_format(ab, " dev="); + audit_log_untrustedstring(ab, inode->i_sb->s_id); + audit_log_format(ab, " ino=%lu", inode->i_ino); + } + + audit_log_format(ab, " ioctlcmd=%hx", a->u.op->cmd); + break; + } case LSM_AUDIT_DATA_DENTRY: { struct inode *inode; |