Steve Grubb
f9b741d300
UPSTREAM: audit: Record fanotify access control decisions ...
The fanotify interface allows user space daemons to make access
control decisions. Under common criteria requirements, we need to
optionally record decisions based on policy. This patch adds a bit mask,
FAN_AUDIT, that a user space daemon can 'or' into the response decision
which will tell the kernel that it made a decision and record it.
It would be used something like this in user space code:
response.response = FAN_DENY | FAN_AUDIT;
write(fd, &response, sizeof(struct fanotify_response));
When the syscall ends, the audit system will record the decision as a
AUDIT_FANOTIFY auxiliary record to denote that the reason this event
occurred is the result of an access control decision from fanotify
rather than DAC or MAC policy.
A sample event looks like this:
type=PATH msg=audit(1504310584.332:290): item=0 name="./evil-ls"
inode=1319561 dev=fc:03 mode=0100755 ouid=1000 ogid=1000 rdev=00:00
obj=unconfined_u:object_r:user_home_t:s0 nametype=NORMAL
type=CWD msg=audit(1504310584.332:290): cwd="/home/sgrubb"
type=SYSCALL msg=audit(1504310584.332:290): arch=c000003e syscall=2
success=no exit=-1 a0=32cb3fca90 a1=0 a2=43 a3=8 items=1 ppid=901
pid=959 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000
fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=pts1 ses=3 comm="bash"
exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:
s0-s0:c0.c1023 key=(null)
type=FANOTIFY msg=audit(1504310584.332:290): resp=2
Prior to using the audit flag, the developer needs to call
fanotify_init or'ing in FAN_ENABLE_AUDIT to ensure that the kernel
supports auditing. The calling process must also have the CAP_AUDIT_WRITE
capability.
Signed-off-by: sgrubb <sgrubb@redhat.com>
Reviewed-by: Amir Goldstein <amir73il@gmail.com>
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Sorayukii <sorayukii69@gmail.com>
2026-05-15 17:59:18 +07:00
UPSTREAM: binder: add flag to clear buffer on txn complete
2022-11-30 02:27:36 +02:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
install several missing uapi headers
2020-08-21 11:01:49 +02:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
install several missing uapi headers
2020-08-21 11:01:49 +02:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
Merge "Merge android-4.9.227(892702560) into msm-4.9"
2020-07-08 02:20:36 -07:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-18.1-caf-sdm845
2021-04-26 01:27:02 +03:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
UPSTREAM: net:sched: add action inheritdsfield to skbedit
2026-05-15 17:57:02 +07:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-18.1-caf-sdm845
2021-04-26 01:27:02 +03:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
UPSTREAM: audit: Record fanotify access control decisions
2026-05-15 17:59:18 +07:00
power: vm-bms: Add snapshot of qpnp-vm-bms driver
2018-05-02 17:19:36 +05:30
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
soc: qcom: bgdaemon: add uevent support for TWM BG
2020-03-16 20:57:55 -07:00
BACKPORT: bpf: Add mmap() support for BPF_MAP_TYPE_ARRAY
2026-05-15 17:59:15 +07:00
UPSTREAM: bpf: add comments to BPF ld/ldx sizes
2026-05-15 17:56:05 +07:00
BACKPORT: bpf: correct broken uapi for BPF_PROG_TYPE_PERF_EVENT program type
2026-05-15 17:59:13 +07:00
UPSTREAM: net: add skeleton of bpfilter kernel module
2026-05-15 17:56:31 +07:00
UPSTREAM: bpf: add specification for BTF Var and DataSec kinds
2026-05-15 17:57:36 +07:00
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
2022-11-25 17:35:35 +01:00
cec: move cec headers to uapi directory
2020-06-22 14:15:29 +05:30
cec: move cec headers to uapi directory
2020-06-22 14:15:29 +05:30
uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side headers
2019-08-06 18:29:38 +02:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
Merge android-4.9.219(6ee8be4) into msm-4.9
2020-04-28 15:06:13 +08:00
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
BACKPORT: sock: add MSG_ZEROCOPY
2026-05-15 17:55:01 +07:00
esoc: Add provision to handle shutdown request in userspace
2017-10-27 16:39:16 -07:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
eventpoll.h: fix epoll event masks
2018-03-22 09:17:38 +01:00
UPSTREAM: audit: Record fanotify access control decisions
2026-05-15 17:59:18 +07:00
statx: Add a system call to make enhanced file info available
2025-07-10 14:15:39 -04:00
include: fib: Remove the deprecated UID fields
2017-09-06 15:09:16 -07:00
Merge android-4.9.149 ( ed0b11d) into msm-4.9
2019-02-12 11:18:51 +08:00
Merge android-4.9.181 ( 6ccab84) into msm-4.9
2019-08-07 15:58:44 +08:00
input: misc: hbtp_input: support active blob flag
2018-02-28 14:42:44 -08:00
Merge android-4.9.160 ( fd5657a) into msm-4.9
2019-03-21 14:06:06 +08:00
BACKPORT: xdp: support simultaneous driver and hw XDP attachment
2026-05-15 17:57:52 +07:00
net: l2tp: deprecate PPPOL2TP_MSG_* in favour of L2TP_MSG_*
2020-05-27 16:41:53 +02:00
UPSTREAM: xsk: Fix umem fill/completion queue mmap on 32-bit
2026-05-15 17:57:49 +07:00
UPSTREAM: tcp_diag: report TCP MD5 signing keys and addresses
2026-05-15 17:55:21 +07:00
Revert "ANDROID: ALSA: jack: Update supported jack switch types"
2026-01-06 16:27:45 +02:00
UPSTREAM: HID: sony: Report DS4 motion sensors through a separate device
2018-10-24 17:03:59 -07:00
netfilter: nf_defrag_ipv4: Add sysctl to disable per interface
2018-01-10 19:42:37 -07:00
msm: ipa: add support for HW stats to QMI
2018-05-04 16:09:13 +05:30
BACKPORT: ipv6: implement dataplane support for rthdr type 4 (Segment Routing Header)
2026-05-15 17:54:16 +07:00
install several missing uapi headers
2020-08-21 11:01:49 +02:00
UPSTREAM: kcov: support comparison operands collection
2017-12-18 15:21:35 -08:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
x86/kvm/hyper-v: Explicitly align hcall param for kvm_hyperv_exit
2020-06-20 10:24:14 +02:00
uapi: fix linux/if_pppol2tp.h userspace compilation errors
2020-06-03 08:16:33 +02:00
uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define
2019-02-20 10:18:35 +01:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
BACKPORT: loop: Add LOOP_CONFIGURE ioctl
2020-08-11 09:26:34 +02:00
BACKPORT: bpf: BPF for lightweight tunnel infrastructure
2026-05-15 17:54:17 +07:00
msm: mhi_dev: Add cv2x HW channel support in MHI driver
2019-07-30 05:53:20 -07:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h>
2020-09-12 11:47:36 +02:00
msm: ipa3: Send pipe info based on tethering protocol
2020-04-02 23:57:00 +05:30
msm: kgsl: Log context type in case of GPU faults
2018-10-15 16:06:11 +05:30
msm: mdss: Allow resource update during secure UI
2020-03-05 05:50:00 +05:30
msm: mdss: Add support to update backlight when display commit
2018-06-20 17:51:10 +05:30
include: Add snapshot of vidc encoder and decoder headers in msm-4.9
2018-05-22 20:34:11 -07:00
include: Add snapshot of vidc encoder and decoder headers in msm-4.9
2018-05-22 20:34:11 -07:00
UPSTREAM: net: add new control message for incoming HW-timestamped packets
2026-05-15 17:55:02 +07:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
uapi: fix linux/nfc.h userspace compilation errors
2022-01-05 12:31:25 +01:00
nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header
2019-07-21 09:06:04 +02:00
nl80211: add WPA3 definition for SAE authentication
2024-12-13 22:46:35 +01:00
drivers misc: add okl4-link-shbuf driver
2018-12-09 18:41:17 -08:00
BACKPORT: openvswitch: add erspan version I and II support
2026-05-15 17:56:40 +07:00
Merge remote-tracking branch 'common/android-4.9-q' into lineage-18.1-caf-sdm845
2021-12-27 02:07:39 +02:00
BACKPORT: perf, bpf: Introduce PERF_RECORD_BPF_EVENT
2026-05-15 17:58:54 +07:00
UPSTREAM: bpf: expose prog id for cls_bpf and act_bpf
2026-05-15 17:54:51 +07:00
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
Merge android-4.9.176 ( e0625b3) into msm-4.9
2019-06-13 14:31:04 +08:00
arm/arm64: KVM: Add PSCI_VERSION helper
2018-04-20 08:21:04 +02:00
include: uapi: Add QBG UAPI headers
2021-06-29 14:18:55 +05:30
include: uapi: Add QBG UAPI headers
2021-06-29 14:18:55 +05:30
qbt1000: Add support for fingerprint gestures
2018-02-14 20:40:01 +05:30
msm: crypto: Add support for map and unmap ioctls
2018-04-20 10:56:50 -07:00
power: qpnp-qg: Add support for PMI632 v2.0
2018-06-18 11:37:25 +05:30
power: qpnp-qg: Add support for voltage-only mode of QG
2019-01-17 17:27:28 +05:30
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
ice: msm: Encrypt only userdata
2018-06-01 14:39:35 +05:30
random: ignore GRND_RANDOM in getentropy(2)
2022-06-25 11:45:02 +02:00
uapi: fix linux/rds.h userspace compilation errors
2017-11-21 09:23:28 +01:00
msm: ipa: Add support for per client lan statistics
2017-10-30 23:23:51 +05:30
UPSTREAM: net: ipv4: add new RTM_F_FIB_MATCH flag for use with RTM_GETROUTE
2026-05-15 17:54:44 +07:00
BACKPORT: clone: add CLONE_PIDFD
2019-09-03 13:44:48 -07:00
seccomp: Add filter flag to opt-out of SSB mitigation
2018-05-22 16:58:01 +02:00
seemp: read hypervisor rooting detections
2017-07-12 10:12:23 -07:00
seemp: read hypervisor rooting detections
2017-07-12 10:12:23 -07:00
UPSTREAM: ipv6: sr: remove cleanup flag and fix HMAC computation
2026-05-15 17:54:25 +07:00
UPSTREAM: ipv6: sr: add code base for control plane support of SR-IPv6
2026-05-15 17:54:16 +07:00
BACKPORT: ipv6: sr: add core files for SR HMAC support
2026-05-15 17:54:16 +07:00
UPSTREAM: ipv6: sr: add support for SRH encapsulation and injection with lwtunnels
2026-05-15 17:54:16 +07:00
serial: 8250: Define RX trigger levels for OxSemi 950 devices
2021-09-22 11:43:06 +02:00
uapi: Add UAPI headers for slatecom_interface driver
2021-09-09 15:16:49 +05:30
BACKPORT: tcp: export packets delivery info
2026-05-15 17:58:43 +07:00
spcom: move SPCOM_MAX_CHANNELS define to uapi/linux/spcom.h
2017-08-13 08:35:44 -07:00
statx: Add a system call to make enhanced file info available
2025-07-10 14:15:39 -04:00
include/uapi/linux/swab: Fix potentially missing __always_inline
2023-01-07 12:07:28 +01:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
BACKPORT: delayacct: track delays from thrashing cache pages
2019-03-22 14:08:39 -07:00
BACKPORT: tcp: add dsack blocks received stats
2026-05-15 17:58:44 +07:00
BACKPORT: tee: add register user memory
2018-02-21 15:40:42 +00:00
Revert "rtc: alarm: Add power-on alarm feature"
2017-11-01 01:19:42 -07:00
tipc: Avoid copying bytes beyond the supplied data
2019-06-11 12:22:34 +02:00
UPSTREAM: tls: RX path for ktls
2026-05-15 17:58:23 +07:00
tty: actually undefine superseded ASYNC flags
2021-05-22 10:40:24 +02:00
msm: vidc: Add support for setting dynamic QP range
2019-05-19 14:09:11 +05:30
Merge remote-tracking branch 'common/android-4.9-q' into android13-4.9-sdm845
2022-11-09 19:25:28 +02:00
power: vm-bms: Add snapshot of qpnp-vm-bms driver
2018-05-02 17:19:36 +05:30
UPSTREAM: wireguard: global: fix spelling mistakes in comments
2021-03-23 02:09:21 +02:00
BACKPORT: xfrm: Add a new lookup key to match xfrm interfaces.
2018-10-26 21:39:51 -07:00
f9b741d300