This repository has been archived on 2026-03-14. You can view files and clone it, but cannot push or open issues or pull requests.
Files
ubports_kernel_google_msm/include/linux
Steve Grubb 073115d6b2 [PATCH] Rework of IPC auditing
1) The audit_ipc_perms() function has been split into two different
functions:
        - audit_ipc_obj()
        - audit_ipc_set_perm()

There's a key shift here...  The audit_ipc_obj() collects the uid, gid,
mode, and SElinux context label of the current ipc object.  This
audit_ipc_obj() hook is now found in several places.  Most notably, it
is hooked in ipcperms(), which is called in various places around the
ipc code permforming a MAC check.  Additionally there are several places
where *checkid() is used to validate that an operation is being
performed on a valid object while not necessarily having a nearby
ipcperms() call.  In these locations, audit_ipc_obj() is called to
ensure that the information is captured by the audit system.

The audit_set_new_perm() function is called any time the permissions on
the ipc object changes.  In this case, the NEW permissions are recorded
(and note that an audit_ipc_obj() call exists just a few lines before
each instance).

2) Support for an AUDIT_IPC_SET_PERM audit message type.  This allows
for separate auxiliary audit records for normal operations on an IPC
object and permissions changes.  Note that the same struct
audit_aux_data_ipcctl is used and populated, however there are separate
audit_log_format statements based on the type of the message.  Finally,
the AUDIT_IPC block of code in audit_free_aux() was extended to handle
aux messages of this new type.  No more mem leaks I hope ;-)

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
2006-05-01 06:10:04 -04:00
..
2006-01-08 20:14:02 -08:00
2006-03-21 08:52:18 -08:00
2006-02-22 09:32:46 +00:00
2006-03-31 12:18:48 -08:00
2006-01-13 16:29:56 -08:00
2005-11-13 18:14:17 -08:00
2006-05-01 06:10:04 -04:00
2006-01-13 09:12:21 -08:00
2006-03-24 07:33:20 -08:00
2006-03-28 09:16:05 -08:00
2006-03-23 07:38:09 -08:00
2006-03-27 08:44:59 -08:00
2006-01-08 20:14:02 -08:00
2006-03-27 08:44:59 -08:00
2006-01-08 20:13:49 -08:00
2005-11-05 21:00:02 -05:00
2006-03-31 12:18:54 -08:00
2006-01-18 19:20:29 -08:00
2006-04-02 00:08:05 -05:00
2005-11-10 02:26:41 +01:00
2006-04-11 06:18:35 -07:00
2006-01-14 18:27:09 -08:00
2006-03-26 08:56:56 -08:00
2006-03-27 08:44:51 -08:00
2005-11-08 17:14:08 +01:00
2005-11-08 09:40:47 -08:00
2006-03-20 17:09:11 -08:00
2006-03-20 22:41:23 -08:00
2006-01-06 13:24:54 -08:00
2006-04-02 00:10:28 -05:00
2006-02-01 08:53:13 -08:00
2006-02-08 01:03:52 -05:00
2006-01-06 13:24:29 -08:00
2006-03-26 08:56:56 -08:00
2006-03-20 22:21:10 -08:00
2005-11-07 14:18:56 +01:00
2006-04-27 13:08:56 -07:00
2006-03-23 07:38:12 -08:00
2005-10-30 17:37:17 -08:00
2006-03-23 07:38:12 -08:00
2006-03-27 08:44:52 -08:00
2006-03-22 07:53:57 -08:00
2006-03-27 08:44:48 -08:00
2006-03-23 07:38:13 -08:00
2006-03-23 07:38:14 -08:00
2006-03-23 07:38:14 -08:00
2006-03-20 13:44:40 -05:00
2006-03-20 13:44:27 -05:00
2006-04-11 06:18:39 -07:00
2006-04-19 09:13:53 -07:00
2006-03-08 14:14:01 -08:00
2006-01-15 02:12:54 +01:00
2006-03-27 08:44:48 -08:00
2006-03-25 08:22:51 -08:00
2006-03-25 08:22:53 -08:00
2005-11-07 07:53:46 -08:00
2006-03-27 08:44:51 -08:00
2005-10-30 11:14:39 +11:00
2006-01-08 20:14:02 -08:00
2006-05-01 06:09:56 -04:00
2005-11-07 07:53:41 -08:00
2006-03-23 07:38:12 -08:00
2005-10-30 17:37:32 -08:00
2006-04-02 00:08:05 -05:00
2005-11-07 07:53:37 -08:00
2006-01-14 18:27:13 -08:00
2006-03-20 22:41:23 -08:00
2006-03-28 09:16:05 -08:00
2005-10-30 17:37:32 -08:00
2006-03-26 08:57:03 -08:00
2006-03-31 12:18:56 -08:00
2006-01-12 14:06:38 -08:00
2006-01-10 08:01:59 -08:00
2006-03-23 07:38:11 -08:00
2006-03-26 08:57:00 -08:00
2006-03-23 07:38:14 -08:00
2006-03-28 09:16:05 -08:00
2005-10-29 21:40:35 -07:00
2005-11-07 07:53:41 -08:00
2006-03-23 07:12:57 -05:00
2006-01-10 08:01:57 -08:00