ich777/linux_media
1
0
Fork 0
mirror of https://github.com/tbsdtv/linux_media.git synced 2025-07-23 12:43:29 +02:00
Code Issues Packages Projects Releases Wiki Activity

audit: log module name on init_module

Browse Source 
This adds a new auxiliary record MODULE_INIT to the SYSCALL event.

We get finit_module for free since it made most sense to hook this in to
load_module().

https://github.com/linux-audit/audit-kernel/issues/7
https://github.com/linux-audit/audit-kernel/wiki/RFE-Module-Load-Record-Format

Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Acked-by: Jessica Yu <jeyu@redhat.com>
[PM: corrected links in the commit description]
Signed-off-by: Paul Moore <paul@paul-moore.com>
This commit is contained in:
Richard Guy Briggs
2017-02-04 13:10:38 -05:00
committed by Paul Moore
parent 62bc306e20
commit ca86cad738
5 changed files with 34 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
kernel/audit.h
View File

@@ -199,6 +199,9 @@ struct audit_context {
struct {
int argc;
} execve;
struct {
char *name;
} module;
};
int fds[2];
struct audit_proctitle proctitle;