public inbox for linux-audit@redhat.com
 help / color / mirror / Atom feed
* [PATCH] log obj label when opening an existing mq
@ 2007-01-24  0:07 Amy Griffis
  0 siblings, 0 replies; only message in thread
From: Amy Griffis @ 2007-01-24  0:07 UTC (permalink / raw)
  To: linux-audit

Add an audit_inode() hook to mq_open() so audit will log the object
label for an existing POSIX message queue. Without this patch, audit
only logs the object label when a new message queue is created.

Untested patch against lspp.63 kernel.

Signed-off-by: Amy Griffis <amy.griffis@hp.com>
---
diff -Nrup linux-2.6.18.x86_64/ipc/mqueue.c linux-2.6.18.x86_64-amg/ipc/mqueue.c
--- linux-2.6.18.x86_64/ipc/mqueue.c	2007-01-23 17:17:06.000000000 -0500
+++ linux-2.6.18.x86_64-amg/ipc/mqueue.c	2007-01-23 18:25:25.000000000 -0500
@@ -642,6 +642,7 @@ static int oflag2acc[O_ACCMODE] = { MAY_
 		return ERR_PTR(-EINVAL);
 	}
 
+	audit_inode(dentry->d_name.name, dentry->d_inode);
 	if (permission(dentry->d_inode, oflag2acc[oflag & O_ACCMODE], NULL)) {
 		dput(dentry);
 		mntput(mqueue_mnt);

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2007-01-24  0:07 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-01-24  0:07 [PATCH] log obj label when opening an existing mq Amy Griffis

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox