From mboxrd@z Thu Jan 1 00:00:00 1970 From: Eric Paris Subject: [GIT PULL] Audit subsystem for v3.15 Date: Thu, 10 Apr 2014 19:53:35 -0400 Message-ID: <1397174015.29990.30.camel@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Linus Torvalds Cc: linux-audit@redhat.com, linux-kernel@vger.kernel.org List-Id: linux-audit@redhat.com TGludXMsCgpQbGVhc2UgcHVsbCB0aGUgYXVkaXQgdHJlZSBmb3IgdjMuMTUuICBZb3Ugd2lsbCBo YXZlIG1lcmdlIGNvbmZsaWN0cy4KSSdsbCBwdWJsaXNoIG15IGJyYW5jaCAibWVyZ2UtdGVzdCIg d2hlcmUgSSBhdHRlbXB0ZWQgdG8gcmVzb2x2ZSB0aGVtCnRoZSB3YXkgeW91IHdpbGwuCgpUaGUg bWFpbiBpc3N1ZSBpcyBhbiBhY3Jvc3MgdHJlZSBjaGFuZ2UgdG8gc3lzY2FsbF9nZXRfYXJjaCgp LiAgSSBjaGFuZ2UKaXQgZnJvbSB0YWtpbmcgYSB0YXNrX3N0cnVjdCBhbmQgcHRfcmVncyB0byB0 YWtlIGEgdm9pZC4gIE5vdCBhIHNpbmdsZQphcmNoIHVzZWQgb3IgbmVlZGVkIGVpdGhlciBvZiB0 aGVzZSBhcmd1bWVudHMuICAoRm9yIDMuMTYgd2UgcGxhbiB0bwppbXBsZW1lbnQgdGhlIGZ1bmN0 aW9uIG9uIG1vcmUgYXJjaGVzKQoKVGhlcmUgYXJlIGEgY291cGxlIG9mIGNvbmZsaWN0cyB3aGVy ZSBJIG1hZGUgY2hhbmdlcyB0byAjaW5jbHVkZXMgYW5kCnlvdXIgdHJlZSBhbHNvIGhhcyBzb21l IGFkZGl0aW9ucy4gIFNob3VsZCBiZSBvYnZpb3VzLgoKVHdvIGNvbmZsaWN0IGlzc3VlcyB3aXRo IEtjb25maWcgY2hhbmdlcy4gIFRoZSBmaXJzdCBpcyBqdXN0IHRoYXQgeW91cgp0cmVlIGhhcyBz b21lIGFkZGl0aW9uYWwgJ3NlbGVjdCcgbGluZXMgbWluZSBkaWRuJ3QuICBPYnZpb3VzIHRvCnJl c29sdmUuCgpUaGUgc2Vjb25kIGlzIGEgY29uZmxpY3QgaW4gaW5pdC9LY29uZmlnLiAgSSBkb24n dCBjb21wbGV0ZWx5IHVuZGVyc3RhbmQKaXQuICBJIGJlbGlldmUgaXQgd2FzIHRoZSBhZGRpdGlv biBvZiBBTFBIQSB0byB0aGUgZ2lnYW50aWMgZGVwZW5kcwpsaW5lLiAgSSBjaGVycnktcGlja2Vk IHRoZSBwYXRjaCBmcm9tIHlvdXIgdHJlZSB0aGF0IGludHJvZHVjZWQgQUxQSEEKYmVmb3JlIEkg bWFkZSB0aGUgc3dpdGNoIHRvIEhBVkVfQVJDSF9BVURJVFNZU0NBTEwuICBJIGJlbGlldmVkIHRo YXQKd291bGQgYXZvaWQgdGhlIGNvbmZsaWN0LCBidXQgSSBndWVzcyBJIHdhcyB3cm9uZy4gIElu IGFueSBjYXNlLCBJIGhhdmUKdGhlICdzZWxlY3QgSEFWRV9BUkNIX0FVRElUU1lTQ0FMTCcgaW4g YWxwaGEuCgpUaGVyZSBpcyBhbHNvIGEgY29uZmxpY3QgZ2l2ZW4gdGhlIGxhc3Qgc2Vjb25kIEVQ RVJNLT5FQ09OTlJFRlVTRUQKc3dpdGNoZXJvby4gIE15IDMuMTUgaXMgbGVzcyByZXN0cmljdGl2 ZS4gIFdlIHJldHVybiBFQ09OTlJFRlVTRUQgb25seQpmb3Igbm9uLWluaXQgdXNlcm5hbWUuICBT aG91bGQgYmUgYW5vdGhlciBlYXN5IG9uZS4uLgoKUGxlYXNlIGxldCBtZSBrbm93IGlmIGFueXRo aW5nIGlzbid0IGVhc3kvb2J2aW91cyBmb3IgeW91IQoKVGhhbmsgeW91IQoKLUVyaWMKClRoZSBm b2xsb3dpbmcgY2hhbmdlcyBzaW5jZSBjb21taXQgYjdkMzYyMmEzOWZkZTc2NTgxNzBiN2YzY2Y2 YzY4ODliYjhkYjMwZDoKCiAgTWVyZ2UgdGFnICd2My4xMycgaW50byBmb3ItMy4xNSAoMjAxNC0w My0wNyAxMTo0MTozMiAtMDUwMCkKCmFyZSBhdmFpbGFibGUgaW4gdGhlIGdpdCByZXBvc2l0b3J5 IGF0OgoKCiAgZ2l0Oi8vZ2l0LmluZnJhZGVhZC5vcmcvdXNlcnMvZXBhcmlzL2F1ZGl0LmdpdCBt YXN0ZXIKCmZvciB5b3UgdG8gZmV0Y2ggY2hhbmdlcyB1cCB0byAzMTIxMDNkNjRkMGZjYWRiMzMy ODk5YTJjODRiMzU3ZGRiMThmNGUzOgoKICBBVURJVDogbWFrZSBhdWRpdF9pc19jb21wYXQgZGVw ZW5kIG9uIENPTkZJR19BVURJVF9DT01QQVRfR0VORVJJQyAoMjAxNC0wNC0xMCAxNzo1MToyOSAt MDQwMCkKCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0KQUtBU0hJIFRha2FoaXJvICgyKToKICAgICAgYXVkaXQ6IEFkZCBDT05G SUdfSEFWRV9BUkNIX0FVRElUU1lTQ0FMTAogICAgICBhdWRpdDogQWRkIGdlbmVyaWMgY29tcGF0 IHN5c2NhbGwgc3VwcG9ydAoKQ2hyaXMgTWV0Y2FsZiAoMSk6CiAgICAgIEFVRElUOiBtYWtlIGF1 ZGl0X2lzX2NvbXBhdCBkZXBlbmQgb24gQ09ORklHX0FVRElUX0NPTVBBVF9HRU5FUklDCgpFcmlj IFBhcmlzICg3KToKICAgICAgYXVkaXQ6IGluY2x1ZGUgc3ViamVjdCBpbiBsb2dpbiByZWNvcmRz CiAgICAgIHN5c2NhbGxfZ2V0X2FyY2g6IHJlbW92ZSB1c2VsZXNzIGZ1bmN0aW9uIGFyZ3VtZW50 cwogICAgICBhdWRpdDogdXNlIHVhcGkvbGludXgvYXVkaXQuaCBmb3IgQVVESVRfQVJDSCBkZWNs YXJhdGlvbnMKICAgICAgYXVkaXQ6IGRlZmluZSBhdWRpdF9pc19jb21wYXQgaW4ga2VybmVsIGlu dGVybmFsIGhlYWRlcgogICAgICBBVURJVDogQWxsb3cgbG9naW4gaW4gbm9uLWluaXQgbmFtZXNw YWNlcwogICAgICBhdWRpdDogZG8gbm90IGNhc3QgYXVkaXRfcnVsZV9kYXRhIHBvaW50ZXJzIHBv aW50bGVzbHkKICAgICAgYXVkaXQ6IHJlbnVtYmVyIEFVRElUX0ZFQVRVUkVfQ0hBTkdFIGludG8g dGhlIDEzMDAgcmFuZ2UKCkVyaWMgVy4gQmllZGVybWFuICgyKToKICAgICAgYXVkaXQ6IFVzZSBz dHJ1Y3QgbmV0IG5vdCBwaWRfdCB0byByZW1lbWJlciB0aGUgbmV0d29yayBuYW1lc3BjZSB0byBy ZXBseSBpbgogICAgICBhdWRpdDogU2VuZCByZXBsaWVzIGluIHRoZSBwcm9wZXIgbmV0d29yayBu YW1lc3BhY2UuCgpKb2UgUGVyY2hlcyAoMSk6CiAgICAgIGF1ZGl0OiByZW1vdmUgc3RyYXkgbmV3 bGluZSBmcm9tIGF1ZGl0X2xvZ19leGVjdmVfaW5mbygpIGF1ZGl0X3BhbmljKCkgY2FsbAoKSm9z aCBCb3llciAoMSk6CiAgICAgIGF1ZGl0OiByZW1vdmUgc3RyYXkgbmV3bGluZXMgZnJvbSBhdWRp dF9sb2dfbG9zdCBtZXNzYWdlcwoKTW9uYW0gQWdhcndhbCAoMSk6CiAgICAgIGtlcm5lbDogVXNl IFJDVV9JTklUX1BPSU5URVIoeCwgTlVMTCkgaW4gYXVkaXQuYwoKUmljaGFyZCBHdXkgQnJpZ2dz ICg5KToKICAgICAgYXVkaXQ6IFVzZSBtb3JlIGN1cnJlbnQgbG9nZ2luZyBzdHlsZSBhZ2Fpbgog ICAgICBjYXBhYmlsaXRpZXM6IGFkZCBkZXNjcmlwdGlvbnMgZm9yIEFVRElUX0NPTlRST0wgYW5k IEFVRElUX1dSSVRFCiAgICAgIGF1ZGl0OiByZW5hbWUgdGhlIG1pc2xlYWRpbmcgYXVkaXRfZ2V0 X2NvbnRleHQoKSB0byBhdWRpdF90YWtlX2NvbnRleHQoKQogICAgICBwaWQ6IGdldCBwaWRfdCBw cGlkIG9mIHRhc2sgaW4gaW5pdF9waWRfbnMKICAgICAgYXVkaXQ6IGNvbnZlcnQgUFBJRHMgdG8g dGhlIGluaXRhbCBQSUQgbmFtZXNwYWNlLgogICAgICBhdWRpdDogYW5jaG9yIGFsbCBwaWQgcmVm ZXJlbmNlcyBpbiB0aGUgaW5pdGlhbCBwaWQgbmFtZXNwYWNlCiAgICAgIGF1ZGl0OiBhbGxvdyB1 c2VyIHByb2Nlc3NlcyB0byBsb2cgZnJvbSBhbm90aGVyIFBJRCBuYW1lc3BhY2UKICAgICAgYXVk aXQ6IHJlbW92ZSBzdXBlcmZsdW91cyBuZXctIHByZWZpeCBpbiBBVURJVF9MT0dJTiBtZXNzYWdl cwogICAgICBzY2hlZDogZGVjbGFyZSBwaWRfYWxpdmUgYXMgaW5saW5lCgpXaWxsaWFtIFJvYmVy dHMgKDMpOgogICAgICBtbTogQ3JlYXRlIHV0aWxpdHkgZnVuY3Rpb24gZm9yIGFjY2Vzc2luZyBh IHRhc2tzIGNvbW1hbmRsaW5lIHZhbHVlCiAgICAgIHByb2M6IFVwZGF0ZSBnZXQgcHJvY19waWRf Y21kbGluZSgpIHRvIHVzZSBtbS5oIGhlbHBlcnMKICAgICAgYXVkaXQ6IEF1ZGl0IHByb2MvPHBp ZD4vY21kbGluZSBha2EgcHJvY3RpdGxlCgrolKHmraPpvpkgKDEpOgogICAgICBhbHBoYTogRW5h YmxlIHN5c3RlbS1jYWxsIGF1ZGl0aW5nIHN1cHBvcnQuCgogYXJjaC9hbHBoYS9LY29uZmlnICAg ICAgICAgICAgICAgICAgIHwgICA0ICsrKysKIGFyY2gvYWxwaGEvaW5jbHVkZS9hc20vcHRyYWNl LmggICAgICB8ICAgNSArKysrKwogYXJjaC9hbHBoYS9pbmNsdWRlL2FzbS90aHJlYWRfaW5mby5o IHwgICAyICsrCiBhcmNoL2FscGhhL2tlcm5lbC9NYWtlZmlsZSAgICAgICAgICAgfCAgIDEgKwog YXJjaC9hbHBoYS9rZXJuZWwvYXVkaXQuYyAgICAgICAgICAgIHwgIDYwICsrKysrKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrCiBhcmNoL2FscGhh L2tlcm5lbC9lbnRyeS5TICAgICAgICAgICAgfCAgIDYgKysrKystCiBhcmNoL2FscGhhL2tlcm5l bC9wdHJhY2UuYyAgICAgICAgICAgfCAgIDQgKysrKwogYXJjaC9hcm0vS2NvbmZpZyAgICAgICAg ICAgICAgICAgICAgIHwgICAxICsKIGFyY2gvYXJtL2luY2x1ZGUvYXNtL3N5c2NhbGwuaCAgICAg ICB8ICAgNSArKy0tLQogYXJjaC9pYTY0L0tjb25maWcgICAgICAgICAgICAgICAgICAgIHwgICAx ICsKIGFyY2gvbWlwcy9pbmNsdWRlL2FzbS9zeXNjYWxsLmggICAgICB8ICAgNCArKy0tCiBhcmNo L21pcHMva2VybmVsL3B0cmFjZS5jICAgICAgICAgICAgfCAgIDIgKy0KIGFyY2gvcGFyaXNjL0tj b25maWcgICAgICAgICAgICAgICAgICB8ICAgMSArCiBhcmNoL3Bvd2VycGMvS2NvbmZpZyAgICAg ICAgICAgICAgICAgfCAgIDEgKwogYXJjaC9zMzkwL0tjb25maWcgICAgICAgICAgICAgICAgICAg IHwgICAxICsKIGFyY2gvczM5MC9pbmNsdWRlL2FzbS9zeXNjYWxsLmggICAgICB8ICAgNyArKyst LS0tCiBhcmNoL3NoL0tjb25maWcgICAgICAgICAgICAgICAgICAgICAgfCAgIDEgKwogYXJjaC9z cGFyYy9LY29uZmlnICAgICAgICAgICAgICAgICAgIHwgICAxICsKIGFyY2gvdW0vS2NvbmZpZy5j b21tb24gICAgICAgICAgICAgICB8ICAgMSArCiBhcmNoL3g4Ni9LY29uZmlnICAgICAgICAgICAg ICAgICAgICAgfCAgIDEgKwogYXJjaC94ODYvaW5jbHVkZS9hc20vc3lzY2FsbC5oICAgICAgIHwg IDEwICsrKystLS0tLS0KIGRyaXZlcnMvdHR5L3R0eV9hdWRpdC5jICAgICAgICAgICAgICB8ICAg MyArKy0KIGZzL3Byb2MvYmFzZS5jICAgICAgICAgICAgICAgICAgICAgICB8ICAzNiArKy0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KIGluY2x1ZGUvYXNtLWdlbmVyaWMvc3lzY2Fs bC5oICAgICAgICB8ICAgNCArLS0tCiBpbmNsdWRlL2xpbnV4L2F1ZGl0LmggICAgICAgICAgICAg ICAgfCAgMTcgKysrKysrKysrKysrKysrKy0KIGluY2x1ZGUvbGludXgvbW0uaCAgICAgICAgICAg ICAgICAgICB8ICAgMSArCiBpbmNsdWRlL2xpbnV4L3NjaGVkLmggICAgICAgICAgICAgICAgfCAg MjAgKysrKysrKysrKysrKysrKysrKy0KIGluY2x1ZGUvdWFwaS9saW51eC9hdWRpdC5oICAgICAg ICAgICB8ICAgMyArKy0KIGluY2x1ZGUvdWFwaS9saW51eC9jYXBhYmlsaXR5LmggICAgICB8ICAg NCArKysrCiBpbml0L0tjb25maWcgICAgICAgICAgICAgICAgICAgICAgICAgfCAgIDUgKysrKy0K IGtlcm5lbC9hdWRpdC5jICAgICAgICAgICAgICAgICAgICAgICB8ICA2NiArKysrKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQoga2Vy bmVsL2F1ZGl0LmggICAgICAgICAgICAgICAgICAgICAgIHwgICA4ICsrKysrKystCiBrZXJuZWwv YXVkaXRmaWx0ZXIuYyAgICAgICAgICAgICAgICAgfCAgNDEgKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKy0tLS0tLS0tLS0KIGtlcm5lbC9hdWRpdHNjLmMgICAgICAgICAgICAgICAgICAg ICB8IDEzMyArKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKy0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQoga2VybmVsL3NlY2NvbXAuYyAgICAgICAgICAgICAg ICAgICAgIHwgICA0ICsrLS0KIGxpYi9LY29uZmlnICAgICAgICAgICAgICAgICAgICAgICAgICB8 ICAgOSArKysrKysrKysKIGxpYi9NYWtlZmlsZSAgICAgICAgICAgICAgICAgICAgICAgICB8ICAg MSArCiBsaWIvYXVkaXQuYyAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgMTUgKysrKysrKysr KysrKystCiBsaWIvY29tcGF0X2F1ZGl0LmMgICAgICAgICAgICAgICAgICAgfCAgNTAgKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKwogbW0vdXRpbC5jICAg ICAgICAgICAgICAgICAgICAgICAgICAgIHwgIDQ4ICsrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrCiBzZWN1cml0eS9pbnRlZ3JpdHkvaW50ZWdyaXR5X2F1ZGl0 LmMgfCAgIDIgKy0KIHNlY3VyaXR5L2xzbV9hdWRpdC5jICAgICAgICAgICAgICAgICB8ICAxMSAr KysrKysrLS0tLQogNDIgZmlsZXMgY2hhbmdlZCwgNDY0IGluc2VydGlvbnMoKyksIDEzNiBkZWxl dGlvbnMoLSkKIGNyZWF0ZSBtb2RlIDEwMDY0NCBhcmNoL2FscGhhL2tlcm5lbC9hdWRpdC5jCiBj cmVhdGUgbW9kZSAxMDA2NDQgbGliL2NvbXBhdF9hdWRpdC5jCgoKLS0KTGludXgtYXVkaXQgbWFp bGluZyBsaXN0CkxpbnV4LWF1ZGl0QHJlZGhhdC5jb20KaHR0cHM6Ly93d3cucmVkaGF0LmNvbS9t YWlsbWFuL2xpc3RpbmZvL2xpbnV4LWF1ZGl0 From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1759191AbaDJXxj (ORCPT ); Thu, 10 Apr 2014 19:53:39 -0400 Received: from mx1.redhat.com ([209.132.183.28]:36858 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753715AbaDJXxi (ORCPT ); Thu, 10 Apr 2014 19:53:38 -0400 Message-ID: <1397174015.29990.30.camel@localhost> Subject: [GIT PULL] Audit subsystem for v3.15 From: Eric Paris To: Linus Torvalds Cc: linux-audit@redhat.com, linux-kernel@vger.kernel.org Date: Thu, 10 Apr 2014 19:53:35 -0400 Content-Type: text/plain; charset="UTF-8" Mime-Version: 1.0 Content-Transfer-Encoding: 8bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Linus, Please pull the audit tree for v3.15. You will have merge conflicts. I'll publish my branch "merge-test" where I attempted to resolve them the way you will. The main issue is an across tree change to syscall_get_arch(). I change it from taking a task_struct and pt_regs to take a void. Not a single arch used or needed either of these arguments. (For 3.16 we plan to implement the function on more arches) There are a couple of conflicts where I made changes to #includes and your tree also has some additions. Should be obvious. Two conflict issues with Kconfig changes. The first is just that your tree has some additional 'select' lines mine didn't. Obvious to resolve. The second is a conflict in init/Kconfig. I don't completely understand it. I believe it was the addition of ALPHA to the gigantic depends line. I cherry-picked the patch from your tree that introduced ALPHA before I made the switch to HAVE_ARCH_AUDITSYSCALL. I believed that would avoid the conflict, but I guess I was wrong. In any case, I have the 'select HAVE_ARCH_AUDITSYSCALL' in alpha. There is also a conflict given the last second EPERM->ECONNREFUSED switcheroo. My 3.15 is less restrictive. We return ECONNREFUSED only for non-init username. Should be another easy one... Please let me know if anything isn't easy/obvious for you! Thank you! -Eric The following changes since commit b7d3622a39fde7658170b7f3cf6c6889bb8db30d: Merge tag 'v3.13' into for-3.15 (2014-03-07 11:41:32 -0500) are available in the git repository at: git://git.infradead.org/users/eparis/audit.git master for you to fetch changes up to 312103d64d0fcadb332899a2c84b357ddb18f4e3: AUDIT: make audit_is_compat depend on CONFIG_AUDIT_COMPAT_GENERIC (2014-04-10 17:51:29 -0400) ---------------------------------------------------------------- AKASHI Takahiro (2): audit: Add CONFIG_HAVE_ARCH_AUDITSYSCALL audit: Add generic compat syscall support Chris Metcalf (1): AUDIT: make audit_is_compat depend on CONFIG_AUDIT_COMPAT_GENERIC Eric Paris (7): audit: include subject in login records syscall_get_arch: remove useless function arguments audit: use uapi/linux/audit.h for AUDIT_ARCH declarations audit: define audit_is_compat in kernel internal header AUDIT: Allow login in non-init namespaces audit: do not cast audit_rule_data pointers pointlesly audit: renumber AUDIT_FEATURE_CHANGE into the 1300 range Eric W. Biederman (2): audit: Use struct net not pid_t to remember the network namespce to reply in audit: Send replies in the proper network namespace. Joe Perches (1): audit: remove stray newline from audit_log_execve_info() audit_panic() call Josh Boyer (1): audit: remove stray newlines from audit_log_lost messages Monam Agarwal (1): kernel: Use RCU_INIT_POINTER(x, NULL) in audit.c Richard Guy Briggs (9): audit: Use more current logging style again capabilities: add descriptions for AUDIT_CONTROL and AUDIT_WRITE audit: rename the misleading audit_get_context() to audit_take_context() pid: get pid_t ppid of task in init_pid_ns audit: convert PPIDs to the inital PID namespace. audit: anchor all pid references in the initial pid namespace audit: allow user processes to log from another PID namespace audit: remove superfluous new- prefix in AUDIT_LOGIN messages sched: declare pid_alive as inline William Roberts (3): mm: Create utility function for accessing a tasks commandline value proc: Update get proc_pid_cmdline() to use mm.h helpers audit: Audit proc//cmdline aka proctitle 蔡正龙 (1): alpha: Enable system-call auditing support. arch/alpha/Kconfig | 4 ++++ arch/alpha/include/asm/ptrace.h | 5 +++++ arch/alpha/include/asm/thread_info.h | 2 ++ arch/alpha/kernel/Makefile | 1 + arch/alpha/kernel/audit.c | 60 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ arch/alpha/kernel/entry.S | 6 +++++- arch/alpha/kernel/ptrace.c | 4 ++++ arch/arm/Kconfig | 1 + arch/arm/include/asm/syscall.h | 5 ++--- arch/ia64/Kconfig | 1 + arch/mips/include/asm/syscall.h | 4 ++-- arch/mips/kernel/ptrace.c | 2 +- arch/parisc/Kconfig | 1 + arch/powerpc/Kconfig | 1 + arch/s390/Kconfig | 1 + arch/s390/include/asm/syscall.h | 7 +++---- arch/sh/Kconfig | 1 + arch/sparc/Kconfig | 1 + arch/um/Kconfig.common | 1 + arch/x86/Kconfig | 1 + arch/x86/include/asm/syscall.h | 10 ++++------ drivers/tty/tty_audit.c | 3 ++- fs/proc/base.c | 36 ++---------------------------------- include/asm-generic/syscall.h | 4 +--- include/linux/audit.h | 17 ++++++++++++++++- include/linux/mm.h | 1 + include/linux/sched.h | 20 +++++++++++++++++++- include/uapi/linux/audit.h | 3 ++- include/uapi/linux/capability.h | 4 ++++ init/Kconfig | 5 ++++- kernel/audit.c | 66 ++++++++++++++++++++++++++++++++++++++++------------------------- kernel/audit.h | 8 +++++++- kernel/auditfilter.c | 41 +++++++++++++++++++++++++++++++---------- kernel/auditsc.c | 133 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++--------------------------------- kernel/seccomp.c | 4 ++-- lib/Kconfig | 9 +++++++++ lib/Makefile | 1 + lib/audit.c | 15 ++++++++++++++- lib/compat_audit.c | 50 +++++++++++++++++++++++++++++++++++++++++++++++++ mm/util.c | 48 +++++++++++++++++++++++++++++++++++++++++++++++ security/integrity/integrity_audit.c | 2 +- security/lsm_audit.c | 11 +++++++---- 42 files changed, 464 insertions(+), 136 deletions(-) create mode 100644 arch/alpha/kernel/audit.c create mode 100644 lib/compat_audit.c