forked from mirrors/linux
1c30e3af8a
The openat2(2) syscall was added in kernel v5.6 with commit
fddb5d430a ("open: introduce openat2(2) syscall").
Add the openat2(2) syscall to the audit syscall classifier.
Link: https://github.com/linux-audit/audit-kernel/issues/67
Link: https://lore.kernel.org/r/f5f1a4d8699613f8c02ce762807228c841c2e26f.1621363275.git.rgb@redhat.com
Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Acked-by: Christian Brauner <christian.brauner@ubuntu.com>
[PM: merge fuzz due to previous header rename, commit line wraps]
Signed-off-by: Paul Moore <paul@paul-moore.com>
24 lines
489 B
C
24 lines
489 B
C
/* SPDX-License-Identifier: GPL-2.0-or-later */
|
|
/* audit_arch.h -- Arch layer specific support for audit
|
|
*
|
|
* Copyright 2021 Red Hat Inc., Durham, North Carolina.
|
|
* All Rights Reserved.
|
|
*
|
|
* Author: Richard Guy Briggs <rgb@redhat.com>
|
|
*/
|
|
#ifndef _LINUX_AUDIT_ARCH_H_
|
|
#define _LINUX_AUDIT_ARCH_H_
|
|
|
|
enum auditsc_class_t {
|
|
AUDITSC_NATIVE = 0,
|
|
AUDITSC_COMPAT,
|
|
AUDITSC_OPEN,
|
|
AUDITSC_OPENAT,
|
|
AUDITSC_SOCKETCALL,
|
|
AUDITSC_EXECVE,
|
|
AUDITSC_OPENAT2,
|
|
|
|
AUDITSC_NVALS /* count */
|
|
};
|
|
|
|
#endif
|