lkml.org 
[lkml]   [2018]   [Mar]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[RFC PATCH V1 08/12] audit: add containerid support for tty_audit
    Date
    Add container ID information to tty logging rule standalone records.

    Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
    ---
    drivers/tty/tty_audit.c | 5 ++++-
    1 file changed, 4 insertions(+), 1 deletion(-)

    diff --git a/drivers/tty/tty_audit.c b/drivers/tty/tty_audit.c
    index e30aa6b..48ee4b7 100644
    --- a/drivers/tty/tty_audit.c
    +++ b/drivers/tty/tty_audit.c
    @@ -66,8 +66,9 @@ static void tty_audit_log(const char *description, dev_t dev,
    uid_t uid = from_kuid(&init_user_ns, task_uid(tsk));
    uid_t loginuid = from_kuid(&init_user_ns, audit_get_loginuid(tsk));
    unsigned int sessionid = audit_get_sessionid(tsk);
    + struct audit_context *context = audit_alloc_local();

    - ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_TTY);
    + ab = audit_log_start(context, GFP_KERNEL, AUDIT_TTY);
    if (ab) {
    char name[sizeof(tsk->comm)];

    @@ -80,6 +81,8 @@ static void tty_audit_log(const char *description, dev_t dev,
    audit_log_n_hex(ab, data, size);
    audit_log_end(ab);
    }
    + audit_log_container_info(context, "tty", audit_get_containerid(tsk));
    + audit_free_context(context);
    }

    /**
    --
    1.8.3.1
    \
     
     \ /
      Last update: 2018-03-01 20:50    [W:2.156 / U:0.008 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site