1<html><head><meta http-equiv="Content-Type" content="text/html; charset=ANSI_X3.4-1968"><title>__audit_log_bprm_fcaps</title><meta name="generator" content="DocBook XSL Stylesheets V1.78.1"><link rel="home" href="index.html" title="The Linux Kernel API"><link rel="up" href="audit.html" title="Chapter&#160;12.&#160;Audit Interfaces"><link rel="prev" href="API---audit-signal-info.html" title="__audit_signal_info"><link rel="next" href="API---audit-log-capset.html" title="__audit_log_capset"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center"><span class="phrase">__audit_log_bprm_fcaps</span></th></tr><tr><td width="20%" align="left"><a accesskey="p" href="API---audit-signal-info.html">Prev</a>&#160;</td><th width="60%" align="center">Chapter&#160;12.&#160;Audit Interfaces</th><td width="20%" align="right">&#160;<a accesskey="n" href="API---audit-log-capset.html">Next</a></td></tr></table><hr></div><div class="refentry"><a name="API---audit-log-bprm-fcaps"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>__audit_log_bprm_fcaps &#8212; 
2     store information about a loading bprm and relevant fcaps
3 </p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="funcsynopsis"><table border="0" class="funcprototype-table" summary="Function synopsis" style="cellspacing: 0; cellpadding: 0;"><tr><td><code class="funcdef">int <b class="fsfunc">__audit_log_bprm_fcaps </b>(</code></td><td>struct linux_binprm * <var class="pdparam">bprm</var>, </td></tr><tr><td>&#160;</td><td>const struct cred * <var class="pdparam">new</var>, </td></tr><tr><td>&#160;</td><td>const struct cred * <var class="pdparam">old</var><code>)</code>;</td></tr></table><div class="funcprototype-spacer">&#160;</div></div></div><div class="refsect1"><a name="idp1127689756"></a><h2>Arguments</h2><div class="variablelist"><dl class="variablelist"><dt><span class="term"><em class="parameter"><code>bprm</code></em></span></dt><dd><p>
4     pointer to the bprm being processed
5    </p></dd><dt><span class="term"><em class="parameter"><code>new</code></em></span></dt><dd><p>
6     the proposed new credentials
7    </p></dd><dt><span class="term"><em class="parameter"><code>old</code></em></span></dt><dd><p>
8     the old credentials
9    </p></dd></dl></div></div><div class="refsect1"><a name="idp1127693412"></a><h2>Description</h2><p>
10   Simply check if the proc already has the caps given by the file and if not
11   store the priv escalation info for later auditing at the end of the syscall
12   </p><p>
13
14   -Eric
15</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="API---audit-signal-info.html">Prev</a>&#160;</td><td width="20%" align="center"><a accesskey="u" href="audit.html">Up</a></td><td width="40%" align="right">&#160;<a accesskey="n" href="API---audit-log-capset.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top"><span class="phrase">__audit_signal_info</span>&#160;</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">&#160;<span class="phrase">__audit_log_capset</span></td></tr></table></div></body></html>
16