1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
|
#include <linux/types.h>
#include <linux/atomic.h>
#include <linux/mm.h>
#include <linux/export.h>
#include <linux/slab.h>
#include <linux/err.h>
#include <linux/kthread.h>
#include <linux/audit.h>
#include <net/sock.h>
#include <net/netlink.h>
#include <linux/skbuff.h>
#include <linux/netlink.h>
#include <linux/freezer.h>
#include <linux/tty.h>
#include <linux/platform_device.h>
#include <linux/module.h>
#ifdef CONFIG_MTK_AEE_FEATURE
#include <linux/aee.h>
#endif
#define SELINUX_WARNING_C
#include "mtk_selinux_warning_list.h" /* locate at custom/kernel/seplolicy */
#undef SELINUX_WARNING_C
#define AEE_FILTER_LEN 35
#define PRINT_BUF_LEN 80
static int mtk_check_filter(char *scontext);
static int mtk_get_scontext(char *data, char *buf);
static int mtk_check_filter(char *scontext)
{
int i = 0;
/*check whether scontext in filter list */
for (i = 0; aee_filter_list[i] != NULL && i < AEE_FILTER_NUM; i++) {
if (strcmp(scontext, aee_filter_list[i]) == 0)
return i;
}
return -1;
}
static int mtk_get_scontext(char *data, char *buf)
{
char *t1;
char *t2;
int diff = 0;
t1 = strstr(data, "scontext=");
if (t1 == NULL)
return 0;
t1 += 9;
t2 = strchr(t1, ' ');
if (t2 == NULL)
return 0;
diff = t2 - t1;
strncpy(buf, t1, diff);
return 1;
}
static char *mtk_get_process(char *in)
{
char *out = in;
char *tmp;
int i;
/*Omit two ':' */
for (i = 0; i < 2; i++)
out = strchr(out, ':') + 1;
if (out == NULL)
return 0;
tmp = strchr(out, ':');
if (tmp == NULL)
return 0;
*tmp = '\0';
return out;
}
void mtk_audit_hook(char *data)
{
char scontext[AEE_FILTER_LEN] = { '\0' };
char printBuf[PRINT_BUF_LEN] = { '\0' };
char *pname = scontext;
int ret = 0;
/*get scontext from avc warning */
ret = mtk_get_scontext(data, scontext);
if (!ret)
return;
/*check scontext is in warning list */
ret = mtk_check_filter(scontext);
if (ret >= 0) {
pr_warn("[selinux]Enforce: %d, In AEE Warning List scontext: %s\n",
selinux_enforcing, scontext);
pname = mtk_get_process(scontext);
#ifdef CONFIG_MTK_AEE_FEATURE
if (pname != 0) {
sprintf(printBuf, "\nCR_DISPATCH_PROCESSNAME:%s\n", pname);
/*
if (selinux_enforcing) {
aee_kernel_warning_api(__FILE__, __LINE__, DB_OPT_DEFAULT|DB_OPT_NATIVE_BACKTRACE,
printBuf, data);
}
*/
}
#endif
}
}
EXPORT_SYMBOL(mtk_audit_hook);
|
