Home
last modified time | relevance | path

Searched refs:audit_log_format (Results 1 – 33 of 33) sorted by relevance

/linux-4.4.14/security/integrity/
Dintegrity_audit.c42 audit_log_format(ab, "pid=%d uid=%u auid=%u ses=%u", in integrity_audit_msg()
48 audit_log_format(ab, " op="); in integrity_audit_msg()
50 audit_log_format(ab, " cause="); in integrity_audit_msg()
52 audit_log_format(ab, " comm="); in integrity_audit_msg()
55 audit_log_format(ab, " name="); in integrity_audit_msg()
59 audit_log_format(ab, " dev="); in integrity_audit_msg()
61 audit_log_format(ab, " ino=%lu", inode->i_ino); in integrity_audit_msg()
63 audit_log_format(ab, " res=%d", !result); in integrity_audit_msg()
/linux-4.4.14/security/
Dlsm_audit.c192 audit_log_format(ab, " %s=%pI6c", name1, addr); in print_ipv6_addr()
194 audit_log_format(ab, " %s=%d", name2, ntohs(port)); in print_ipv6_addr()
201 audit_log_format(ab, " %s=%pI4", name1, &addr); in print_ipv4_addr()
203 audit_log_format(ab, " %s=%d", name2, ntohs(port)); in print_ipv4_addr()
223 audit_log_format(ab, " pid=%d comm=", task_pid_nr(current)); in dump_common_audit_data()
230 audit_log_format(ab, " key=%d ", a->u.ipc_id); in dump_common_audit_data()
233 audit_log_format(ab, " capability=%d ", a->u.cap); in dump_common_audit_data()
242 audit_log_format(ab, " dev="); in dump_common_audit_data()
244 audit_log_format(ab, " ino=%lu", inode->i_ino); in dump_common_audit_data()
255 audit_log_format(ab, " dev="); in dump_common_audit_data()
[all …]
/linux-4.4.14/net/netfilter/
Dxt_AUDIT.c46 audit_log_format(ab, " truncated=1"); in audit_proto()
50 audit_log_format(ab, " sport=%hu dport=%hu", in audit_proto()
62 audit_log_format(ab, " truncated=1"); in audit_proto()
66 audit_log_format(ab, " icmptype=%hhu icmpcode=%hhu", in audit_proto()
81 audit_log_format(ab, " truncated=1"); in audit_ip4()
85 audit_log_format(ab, " saddr=%pI4 daddr=%pI4 ipid=%hu proto=%hhu", in audit_ip4()
89 audit_log_format(ab, " frag=1"); in audit_ip4()
106 audit_log_format(ab, " truncated=1"); in audit_ip6()
114 audit_log_format(ab, " saddr=%pI6c daddr=%pI6c proto=%hhu", in audit_ip6()
134 audit_log_format(ab, "action=%hhu hook=%u len=%u inif=%s outif=%s", in audit_tg()
[all …]
Dx_tables.c1070 audit_log_format(ab, "table=%s family=%u entries=%u", in xt_replace_table()
/linux-4.4.14/security/apparmor/
Daudit.c116 audit_log_format(ab, "apparmor="); in audit_pre()
121 audit_log_format(ab, " operation="); in audit_pre()
126 audit_log_format(ab, " info="); in audit_pre()
129 audit_log_format(ab, " error=%d", sa->aad->error); in audit_pre()
135 audit_log_format(ab, " namespace="); in audit_pre()
138 audit_log_format(ab, " profile="); in audit_pre()
143 audit_log_format(ab, " name="); in audit_pre()
Dfile.c71 audit_log_format(ab, " requested_mask="); in file_audit_cb()
75 audit_log_format(ab, " denied_mask="); in file_audit_cb()
79 audit_log_format(ab, " fsuid=%d", in file_audit_cb()
81 audit_log_format(ab, " ouid=%d", in file_audit_cb()
86 audit_log_format(ab, " target="); in file_audit_cb()
Dipc.c28 audit_log_format(ab, " target="); in audit_cb()
Dcapability.c50 audit_log_format(ab, " capname="); in audit_cb()
Dresource.c37 audit_log_format(ab, " rlimit=%s value=%lu", in audit_cb()
Dpolicy_unpack.c75 audit_log_format(ab, " name="); in audit_cb()
79 audit_log_format(ab, " offset=%ld", sa->aad->iface.pos); in audit_cb()
/linux-4.4.14/kernel/
Daudit.c294 audit_log_format(ab, "%s=%u old=%u", function_name, new, old); in audit_log_config_change()
299 audit_log_format(ab, " res=%d", allow_changes); in audit_log_config_change()
717 audit_log_format(*ab, "pid=%d uid=%u", pid, uid); in audit_log_common_recv_msg()
749 audit_log_format(ab, " feature=%s old=%u new=%u old_lock=%u new_lock=%u res=%d", in audit_log_feature_change()
931 audit_log_format(ab, " msg='%.*s'", in audit_receive_msg()
937 audit_log_format(ab, " data="); in audit_receive_msg()
955 audit_log_format(ab, " audit_enabled=%d res=0", audit_enabled); in audit_receive_msg()
968 audit_log_format(ab, " op=trim res=1"); in audit_receive_msg()
999 audit_log_format(ab, " op=make_equiv old="); in audit_receive_msg()
1001 audit_log_format(ab, " new="); in audit_receive_msg()
[all …]
Dauditsc.c972 audit_log_format(ab, "opid=%d oauid=%d ouid=%d oses=%d", pid, in audit_log_pid_context()
977 audit_log_format(ab, " obj=(none)"); in audit_log_pid_context()
980 audit_log_format(ab, " obj=%s", ctx); in audit_log_pid_context()
984 audit_log_format(ab, " ocomm="); in audit_log_pid_context()
1096 audit_log_format(*ab, " a%d_len=%zu", arg_num, in audit_log_single_execve_arg()
1116 audit_log_format(*ab, " a%d", arg_num); in audit_log_single_execve_arg()
1118 audit_log_format(*ab, "[%d]", i); in audit_log_single_execve_arg()
1119 audit_log_format(*ab, "="); in audit_log_single_execve_arg()
1147 audit_log_format(*ab, "argc=%d", context->execve.argc); in audit_log_execve_info()
1183 audit_log_format(ab, "nargs=%d", nargs); in show_special()
[all …]
Daudit_fsnotify.c133 audit_log_format(ab, "auid=%u ses=%u op=", in audit_mark_log_rule_change()
137 audit_log_format(ab, " path="); in audit_mark_log_rule_change()
140 audit_log_format(ab, " list=%d res=1", rule->listnr); in audit_mark_log_rule_change()
Daudit_watch.c244 audit_log_format(ab, "auid=%u ses=%u op=", in audit_watch_log_rule_change()
248 audit_log_format(ab, " path="); in audit_watch_log_rule_change()
251 audit_log_format(ab, " list=%d res=1", r->listnr); in audit_watch_log_rule_change()
Daudit_tree.c461 audit_log_format(ab, "op="); in audit_tree_log_remove_rule()
463 audit_log_format(ab, " dir="); in audit_tree_log_remove_rule()
466 audit_log_format(ab, " list=%d res=1", rule->listnr); in audit_tree_log_remove_rule()
Dauditfilter.c1075 audit_log_format(ab, "auid=%u ses=%u" ,loginuid, sessionid); in audit_log_rule_change()
1077 audit_log_format(ab, " op="); in audit_log_rule_change()
1080 audit_log_format(ab, " list=%d res=%d", rule->listnr, res); in audit_log_rule_change()
/linux-4.4.14/net/netlabel/
Dnetlabel_addrlist.c332 audit_log_format(audit_buf, " netif=%s", dev); in netlbl_af4list_audit_addr()
333 audit_log_format(audit_buf, " %s=%pI4", dir, &addr); in netlbl_af4list_audit_addr()
340 audit_log_format(audit_buf, " %s_prefixlen=%d", dir, mask_len); in netlbl_af4list_audit_addr()
366 audit_log_format(audit_buf, " netif=%s", dev); in netlbl_af6list_audit_addr()
367 audit_log_format(audit_buf, " %s=%pI6", dir, addr); in netlbl_af6list_audit_addr()
379 audit_log_format(audit_buf, " %s_prefixlen=%d", dir, mask_len); in netlbl_af6list_audit_addr()
Dnetlabel_user.c106 audit_log_format(audit_buf, "netlabel: auid=%u ses=%u", in netlbl_audit_start_common()
114 audit_log_format(audit_buf, " subj=%s", secctx); in netlbl_audit_start_common()
Dnetlabel_domainhash.c210 audit_log_format(audit_buf, " nlbl_domain=%s", in netlbl_domhsh_audit_add()
233 audit_log_format(audit_buf, " nlbl_protocol=unlbl"); in netlbl_domhsh_audit_add()
237 audit_log_format(audit_buf, in netlbl_domhsh_audit_add()
242 audit_log_format(audit_buf, " res=%u", result == 0 ? 1 : 0); in netlbl_domhsh_audit_add()
526 audit_log_format(audit_buf, in netlbl_domhsh_remove_entry()
Dnetlabel_unlabeled.c463 audit_log_format(audit_buf, " sec_obj=%s", secctx); in netlbl_unlhsh_add()
466 audit_log_format(audit_buf, " res=%u", ret_val == 0 ? 1 : 0); in netlbl_unlhsh_add()
519 audit_log_format(audit_buf, " sec_obj=%s", secctx); in netlbl_unlhsh_remove_addr4()
522 audit_log_format(audit_buf, " res=%u", entry != NULL ? 1 : 0); in netlbl_unlhsh_remove_addr4()
580 audit_log_format(audit_buf, " sec_obj=%s", secctx); in netlbl_unlhsh_remove_addr6()
583 audit_log_format(audit_buf, " res=%u", entry != NULL ? 1 : 0); in netlbl_unlhsh_remove_addr6()
765 audit_log_format(audit_buf, in netlbl_unlabel_acceptflg_set()
/linux-4.4.14/security/selinux/
Davc.c115 audit_log_format(ab, " null"); in avc_dump_av()
122 audit_log_format(ab, " {"); in avc_dump_av()
127 audit_log_format(ab, " %s", perms[i]); in avc_dump_av()
135 audit_log_format(ab, " 0x%x", av); in avc_dump_av()
137 audit_log_format(ab, " }"); in avc_dump_av()
154 audit_log_format(ab, "ssid=%d", ssid); in avc_dump_query()
156 audit_log_format(ab, "scontext=%s", scontext); in avc_dump_query()
162 audit_log_format(ab, " tsid=%d", tsid); in avc_dump_query()
164 audit_log_format(ab, " tcontext=%s", scontext); in avc_dump_query()
169 audit_log_format(ab, " tclass=%s", secclass_map[tclass-1].name); in avc_dump_query()
[all …]
Dhooks.c3027 audit_log_format(ab, "op=setxattr invalid_context="); in selinux_inode_setxattr()
5661 audit_log_format(ab, "op=fscreate invalid_context="); in selinux_setprocattr()
/linux-4.4.14/security/smack/
Dsmack_access.c325 audit_log_format(ab, "lsm=SMACK fn=%s action=%s", in smack_log_callback()
328 audit_log_format(ab, " subject="); in smack_log_callback()
330 audit_log_format(ab, " object="); in smack_log_callback()
333 audit_log_format(ab, " labels_differ"); in smack_log_callback()
335 audit_log_format(ab, " requested=%s", sad->request); in smack_log_callback()
/linux-4.4.14/security/integrity/ima/
Dima_api.c311 audit_log_format(ab, "file="); in ima_audit_measurement()
313 audit_log_format(ab, " hash="); in ima_audit_measurement()
Dima_policy.c494 audit_log_format(ab, "%s=", key); in ima_log_string()
496 audit_log_format(ab, " "); in ima_log_string()
740 audit_log_format(ab, "res=%d", !result); in ima_parse_rule()
/linux-4.4.14/drivers/tty/
Dtty_audit.c77 audit_log_format(ab, "%s pid=%u uid=%u auid=%u ses=%u major=%d" in tty_audit_log()
82 audit_log_format(ab, " data="); in tty_audit_log()
/linux-4.4.14/net/xfrm/
Dxfrm_state.c2142 audit_log_format(audit_buf, " sec_alg=%u sec_doi=%u sec_obj=%s", in xfrm_audit_helper_sainfo()
2147 audit_log_format(audit_buf, " src=%pI4 dst=%pI4", in xfrm_audit_helper_sainfo()
2151 audit_log_format(audit_buf, " src=%pI6 dst=%pI6", in xfrm_audit_helper_sainfo()
2156 audit_log_format(audit_buf, " spi=%u(0x%x)", spi, spi); in xfrm_audit_helper_sainfo()
2168 audit_log_format(audit_buf, " src=%pI4 dst=%pI4", in xfrm_audit_helper_pktinfo()
2173 audit_log_format(audit_buf, in xfrm_audit_helper_pktinfo()
2192 audit_log_format(audit_buf, " res=%u", result); in xfrm_audit_state_add()
2206 audit_log_format(audit_buf, " res=%u", result); in xfrm_audit_state_delete()
2224 audit_log_format(audit_buf, " spi=%u(0x%x)", spi, spi); in xfrm_audit_state_replay_overflow()
2240 audit_log_format(audit_buf, " spi=%u(0x%x) seqno=%u", in xfrm_audit_state_replay()
[all …]
Dxfrm_policy.c3096 audit_log_format(audit_buf, " sec_alg=%u sec_doi=%u sec_obj=%s", in xfrm_audit_common_policyinfo()
3101 audit_log_format(audit_buf, " src=%pI4", &sel->saddr.a4); in xfrm_audit_common_policyinfo()
3103 audit_log_format(audit_buf, " src_prefixlen=%d", in xfrm_audit_common_policyinfo()
3105 audit_log_format(audit_buf, " dst=%pI4", &sel->daddr.a4); in xfrm_audit_common_policyinfo()
3107 audit_log_format(audit_buf, " dst_prefixlen=%d", in xfrm_audit_common_policyinfo()
3111 audit_log_format(audit_buf, " src=%pI6", sel->saddr.a6); in xfrm_audit_common_policyinfo()
3113 audit_log_format(audit_buf, " src_prefixlen=%d", in xfrm_audit_common_policyinfo()
3115 audit_log_format(audit_buf, " dst=%pI6", sel->daddr.a6); in xfrm_audit_common_policyinfo()
3117 audit_log_format(audit_buf, " dst_prefixlen=%d", in xfrm_audit_common_policyinfo()
3131 audit_log_format(audit_buf, " res=%u", result); in xfrm_audit_policy_add()
[all …]
/linux-4.4.14/include/linux/
Daudit.h458 void audit_log_format(struct audit_buffer *ab, const char *fmt, ...);
513 void audit_log_format(struct audit_buffer *ab, const char *fmt, ...) in audit_log_format() function
/linux-4.4.14/net/ipv4/
Dcipso_ipv4.c531 audit_log_format(audit_buf, in cipso_v4_doi_add()
621 audit_log_format(audit_buf, in cipso_v4_doi_remove()
/linux-4.4.14/include/net/
Dxfrm.h704 audit_log_format(audit_buf, "op=%s", op); in xfrm_audit_start()
717 audit_log_format(audit_buf, " auid=%u ses=%u", auid, ses); in xfrm_audit_helper_usrinfo()
/linux-4.4.14/security/selinux/ss/
Dservices.c511 audit_log_format(ab, "op=security_compute_av reason=%s " in security_dump_masked_av()
521 audit_log_format(ab, "%s%s", in security_dump_masked_av()
/linux-4.4.14/net/bridge/netfilter/
Debtables.c1072 audit_log_format(ab, "table=%s family=%u entries=%u", in do_replace_finish()