Changes in integrity_audit.c

83230351 - integrity: check the return value of audit_log_start()

Sat, 15 Jan 2022 01:11:11 +0000

integrity: check the return value of audit_log_start()audit_log_start() returns audit_buffer pointer on success or NULL onerror, so it is better to check the return value of it.Fixes: 3323eec921ef ("integrity: IMA as an integrity service provider")Signed-off-by: Xiaoke Wang Cc: Reviewed-by: Paul Moore Signed-off-by: Mimi Zohar List of files: /linux-6.15/security/integrity/integrity_audit.c

e44f1287 - integrity: Use current_uid() in integrity_audit_message()

Mon, 24 Aug 2020 12:54:35 +0000

integrity: Use current_uid() in integrity_audit_message()Modify integrity_audit_message() to use current_uid().Signed-off-by: Denis Efremov Signed-off-by: Mimi Zohar List of files: /linux-6.15/security/integrity/integrity_audit.c

2f845882 - integrity: Add errno field in audit message

Thu, 18 Jun 2020 21:10:11 +0000

integrity: Add errno field in audit messageError code is not included in the audit messages logged bythe integrity subsystem.Define a new function integrity_audit_message() that takes error codein the "errno" parameter. Add "errno" field in the audit messages loggedby the integrity subsystem and set the value passed in the "errno"parameter.[ 6.303048] audit: type=1804 audit(1592506281.627:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel op=measuring_key cause=ENOMEM comm="swapper/0" name=".builtin_trusted_keys" res=0 errno=-12[ 7.987647] audit: type=1802 audit(1592506283.312:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 op=policy_update cause=completed comm="systemd" res=1 errno=0[ 8.019432] audit: type=1804 audit(1592506283.344:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 op=measuring_kexec_cmdline cause=hashing_error comm="systemd" name="kexec-cmdline" res=0 errno=-22Signed-off-by: Lakshmi Ramasubramanian Suggested-by: Steve Grubb Suggested-by: Mimi Zohar Signed-off-by: Mimi Zohar List of files: /linux-6.15/security/integrity/integrity_audit.c

b886d83c - treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441

Sat, 01 Jun 2019 08:08:55 +0000

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Based on 1 normalized pattern(s): this program is free software you can redistribute it and or modify it under the terms of the gnu general public license as published by the free software foundation version 2 of the licenseextracted by the scancode license scanner the SPDX license identifier GPL-2.0-onlyhas been chosen to replace the boilerplate/reference in 315 file(s).Signed-off-by: Thomas Gleixner Reviewed-by: Allison Randal Reviewed-by: Armijn Hemel Cc: linux-spdx@vger.kernel.orgLink: https://lkml.kernel.org/r/20190531190115.503150771@linutronix.deSigned-off-by: Greg Kroah-Hartman List of files: /linux-6.15/security/integrity/integrity_audit.c

3d2859d5 - ima: Use audit_log_format() rather than audit_log_string()

Mon, 04 Jun 2018 20:54:53 +0000

ima: Use audit_log_format() rather than audit_log_string()Remove the usage of audit_log_string() and replace it withaudit_log_format().Signed-off-by: Stefan Berger Suggested-by: Steve Grubb Acked-by: Paul Moore Signed-off-by: Mimi Zohar List of files: /linux-6.15/security/integrity/integrity_audit.c

cdfb6b34 - audit: use inline function to get audit context

Sun, 13 May 2018 01:58:20 +0000

audit: use inline function to get audit contextRecognizing that the audit context is an internal audit value, use anaccess function to retrieve the audit context pointer for the taskrather than reaching directly into the task struct to get it.Signed-off-by: Richard Guy Briggs [PM: merge fuzz in auditsc.c and selinuxfs.c, checkpatch.pl fixes]Signed-off-by: Paul Moore List of files: /linux-6.15/security/integrity/integrity_audit.c

f1dc4867 - audit: anchor all pid references in the initial pid namespace

Wed, 11 Dec 2013 18:52:26 +0000

audit: anchor all pid references in the initial pid namespaceStore and log all PIDs with reference to the initial PID namespace anduse the access functions task_pid_nr() and task_tgid_nr() for task->pidand task->tgid.Cc: "Eric W. Biederman" (informed by ebiederman's c776b5d2)Signed-off-by: Richard Guy Briggs List of files: /linux-6.15/security/integrity/integrity_audit.c

2bb930ab - integrity: fix checkpatch errors

Tue, 04 Mar 2014 16:04:20 +0000

integrity: fix checkpatch errorsBetween checkpatch changes (eg. sizeof) and inconsistencies betweenLindent and checkpatch, unfixed checkpatch errors make it difficultto see new errors. This patch fixes them. Some lines with over 80 charsremained unchanged to improve code readability.The "extern" keyword is removed from internal evm.h to make it consistentwith internal ima.h.Signed-off-by: Dmitry Kasatkin Signed-off-by: Mimi Zohar List of files: /linux-6.15/security/integrity/integrity_audit.c

73a6b44a - Integrity: Pass commname via get_task_comm()

Tue, 24 Dec 2013 11:49:01 +0000

Integrity: Pass commname via get_task_comm()When we pass task->comm to audit_log_untrustedstring(), we need to pass itvia get_task_comm() because task->comm can be changed to contain untrustedstring by other threads after audit_log_untrustedstring() confirmed thattask->comm does not contain untrusted string.Signed-off-by: Tetsuo Handa Signed-off-by: Mimi Zohar List of files: /linux-6.15/security/integrity/integrity_audit.c

29707b20 - security: replace strict_strto() with kstrto()

Wed, 05 Feb 2014 06:13:14 +0000

security: replace strict_strto*() with kstrto*()The usage of strict_strto*() is not preferred, becausestrict_strto*() is obsolete. Thus, kstrto*() should beused.Signed-off-by: Jingoo Han Signed-off-by: James Morris List of files: /linux-6.15/security/integrity/integrity_audit.c

d726d8d7 - integrity: move integrity_audit_msg()

Mon, 18 Mar 2013 18:48:02 +0000

integrity: move integrity_audit_msg()This patch moves the integrity_audit_msg() function and defintion tosecurity/integrity/, the parent directory, renames the 'ima_audit'boot command line option to 'integrity_audit', and fixes the Kconfighelp text to reflect the actual code.Changelog:- Fixed ifdef inclusion of integrity_audit_msg() (Fengguang Wu)Signed-off-by: Mimi Zohar List of files: /linux-6.15/security/integrity/integrity_audit.c