[PATCH] add SIGNAL syscall class (v3)
[safe/jmp/linux-2.6] / lib / audit.c
1 #include <linux/init.h>
2 #include <linux/types.h>
3 #include <linux/audit.h>
4 #include <asm/unistd.h>
5
6 static unsigned dir_class[] = {
7 #include <asm-generic/audit_dir_write.h>
8 ~0U
9 };
10
11 static unsigned read_class[] = {
12 #include <asm-generic/audit_read.h>
13 ~0U
14 };
15
16 static unsigned write_class[] = {
17 #include <asm-generic/audit_write.h>
18 ~0U
19 };
20
21 static unsigned chattr_class[] = {
22 #include <asm-generic/audit_change_attr.h>
23 ~0U
24 };
25
26 static unsigned signal_class[] = {
27 #include <asm-generic/audit_signal.h>
28 ~0U
29 };
30
31 int audit_classify_syscall(int abi, unsigned syscall)
32 {
33         switch(syscall) {
34         case __NR_open:
35                 return 2;
36 #ifdef __NR_openat
37         case __NR_openat:
38                 return 3;
39 #endif
40 #ifdef __NR_socketcall
41         case __NR_socketcall:
42                 return 4;
43 #endif
44         case __NR_execve:
45                 return 5;
46         default:
47                 return 0;
48         }
49 }
50
51 static int __init audit_classes_init(void)
52 {
53         audit_register_class(AUDIT_CLASS_WRITE, write_class);
54         audit_register_class(AUDIT_CLASS_READ, read_class);
55         audit_register_class(AUDIT_CLASS_DIR_WRITE, dir_class);
56         audit_register_class(AUDIT_CLASS_CHATTR, chattr_class);
57         audit_register_class(AUDIT_CLASS_SIGNAL, signal_class);
58         return 0;
59 }
60
61 __initcall(audit_classes_init);