kernel-ark/ipc
George C. Wilson 20ca73bc79 [PATCH] Audit of POSIX Message Queue Syscalls v.2
This patch adds audit support to POSIX message queues.  It applies cleanly to
the lspp.b15 branch of Al Viro's git tree.  There are new auxiliary data
structures, and collection and emission routines in kernel/auditsc.c.  New hooks
in ipc/mqueue.c collect arguments from the syscalls.

I tested the patch by building the examples from the POSIX MQ library tarball.
Build them -lrt, not against the old MQ library in the tarball.  Here's the URL:
http://www.geocities.com/wronski12/posix_ipc/libmqueue-4.41.tar.gz
Do auditctl -a exit,always -S for mq_open, mq_timedsend, mq_timedreceive,
mq_notify, mq_getsetattr.  mq_unlink has no new hooks.  Please see the
corresponding userspace patch to get correct output from auditd for the new
record types.

[fixes folded]

Signed-off-by: George Wilson <ltcgcw@us.ibm.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
2006-06-20 05:25:26 -04:00
..
compat_mq.c Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
compat.c [PATCH] sem2mutex: ipc, id.sem 2006-03-26 08:56:55 -08:00
Makefile Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
mqueue.c [PATCH] Audit of POSIX Message Queue Syscalls v.2 2006-06-20 05:25:26 -04:00
msg.c [PATCH] update of IPC audit record cleanup 2006-06-20 05:25:24 -04:00
msgutil.c Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
sem.c [PATCH] update of IPC audit record cleanup 2006-06-20 05:25:24 -04:00
shm.c [PATCH] update of IPC audit record cleanup 2006-06-20 05:25:24 -04:00
util.c [PATCH] Rework of IPC auditing 2006-05-01 06:10:04 -04:00
util.h [PATCH] sem2mutex: ipc, id.sem 2006-03-26 08:56:55 -08:00