From: Richard Guy Briggs <rgb@redhat.com>
To: Eric Paris <eparis@redhat.com>
Cc: linux-audit@redhat.com
Subject: Re: [PATCH] Dropped audit_log_abend()
Date: Mon, 11 Nov 2013 13:51:37 -0500 [thread overview]
Message-ID: <20131111185137.GH24236@madcap2.tricolour.ca> (raw)
In-Reply-To: <1383925493.2247.0.camel@flatline.rdu.redhat.com>
On Fri, Nov 08, 2013 at 10:44:53AM -0500, Eric Paris wrote:
> On Fri, 2013-11-08 at 09:57 +0530, Paul Davies C wrote:
> > The audit_log_abend() is used only by the audit_core_dumps(). Thus there is no
> > need of maintaining the audit_log_abend() as a separate function.
> >
> > This patch drops the audit_log_abend() and pushes its functionalities back to
> > the audit_core_dumps(). Apart from that the "reason" field is also dropped
> > from being logged since the reason can be deduced from the signal number.
> >
> > Signed-off-by: Paul Davies C <pauldaviesc@gmail.com>
>
> Acked-by: Eric Paris <eparis@redhat.com>
Looks fine to me. I'll queue it.
> > ---
> > kernel/auditsc.c | 10 ++--------
> > 1 file changed, 2 insertions(+), 8 deletions(-)
> >
> > diff --git a/kernel/auditsc.c b/kernel/auditsc.c
> > index 9845cb3..f2aa62a 100644
> > --- a/kernel/auditsc.c
> > +++ b/kernel/auditsc.c
> > @@ -2368,13 +2368,6 @@ static void audit_log_task(struct audit_buffer *ab)
> > audit_log_untrustedstring(ab, current->comm);
> > }
> >
> > -static void audit_log_abend(struct audit_buffer *ab, char *reason, long signr)
> > -{
> > - audit_log_task(ab);
> > - audit_log_format(ab, " reason=");
> > - audit_log_string(ab, reason);
> > - audit_log_format(ab, " sig=%ld", signr);
> > -}
> > /**
> > * audit_core_dumps - record information about processes that end abnormally
> > * @signr: signal value
> > @@ -2395,7 +2388,8 @@ void audit_core_dumps(long signr)
> > ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_ANOM_ABEND);
> > if (unlikely(!ab))
> > return;
> > - audit_log_abend(ab, "memory violation", signr);
> > + audit_log_task(ab);
> > + audit_log_format(ab, " sig=%ld", signr);
> > audit_log_end(ab);
> > }
> >
- RGB
--
Richard Guy Briggs <rbriggs@redhat.com>
Senior Software Engineer, Kernel Security, AMER ENG Base Operating Systems, Red Hat
Remote, Ottawa, Canada
Voice: +1.647.777.2635, Internal: (81) 32635, Alt: +1.613.693.0684x3545
prev parent reply other threads:[~2013-11-11 18:51 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-11-08 4:27 [PATCH] Dropped audit_log_abend() Paul Davies C
2013-11-08 15:44 ` Eric Paris
2013-11-11 18:51 ` Richard Guy Briggs [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20131111185137.GH24236@madcap2.tricolour.ca \
--to=rgb@redhat.com \
--cc=eparis@redhat.com \
--cc=linux-audit@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox