Daniel Borkmann
f1aafa8dc8
UPSTREAM: bpf: Emit audit messages upon successful prog load and unload ...
Allow for audit messages to be emitted upon BPF program load and
unload for having a timeline of events. The load itself is in
syscall context, so additional info about the process initiating
the BPF prog creation can be logged and later directly correlated
to the unload event.
The only info really needed from BPF side is the globally unique
prog ID where then audit user space tooling can query / dump all
info needed about the specific BPF program right upon load event
and enrich the record, thus these changes needed here can be kept
small and non-intrusive to the core.
Raw example output:
# auditctl -D
# auditctl -a always,exit -F arch=x86_64 -S bpf
# ausearch --start recent -m 1334
...
----
time->Wed Nov 27 16:04:13 2019
type=PROCTITLE msg=audit(1574867053.120:84664): proctitle="./bpf"
type=SYSCALL msg=audit(1574867053.120:84664): arch=c000003e syscall=321 \
success=yes exit=3 a0=5 a1=7ffea484fbe0 a2=70 a3=0 items=0 ppid=7477 \
pid=12698 auid=1001 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 \
egid=1001 sgid=1001 fsgid=1001 tty=pts2 ses=4 comm="bpf" \
exe="/home/jolsa/auditd/audit-testsuite/tests/bpf/bpf" \
subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
type=UNKNOWN[1334] msg=audit(1574867053.120:84664): prog-id=76 op=LOAD
----
time->Wed Nov 27 16:04:13 2019
type=UNKNOWN[1334] msg=audit(1574867053.120:84665): prog-id=76 op=UNLOAD
...
Change-Id: Ic67b49ceb66d36f28c4a95c26ad55567e2eca574
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Co-developed-by: Jiri Olsa <jolsa@kernel.org>
Signed-off-by: Jiri Olsa <jolsa@kernel.org>
Acked-by: Paul Moore <paul@paul-moore.com>
Link: https://lore.kernel.org/bpf/20191206214934.11319-1-jolsa@kernel.org
Signed-off-by: Sorayukii <sorayukii69@gmail.com>
2026-05-15 17:59:18 +07:00
UPSTREAM: binder: add flag to clear buffer on txn complete
2022-11-30 02:27:36 +02:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
install several missing uapi headers
2020-08-21 11:01:49 +02:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
install several missing uapi headers
2020-08-21 11:01:49 +02:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
ASoC: wcd: add audio codec drivers for MSM targets
2017-01-27 11:28:43 -08:00
Merge "Merge android-4.9.227(892702560) into msm-4.9"
2020-07-08 02:20:36 -07:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-18.1-caf-sdm845
2021-04-26 01:27:02 +03:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
NFC: Add snapshot of NQxxx NFC driver
2017-05-26 15:05:08 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
UPSTREAM: net:sched: add action inheritdsfield to skbedit
2026-05-15 17:57:02 +07:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-18.1-caf-sdm845
2021-04-26 01:27:02 +03:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
Revert "include/uapi/linux/atm_zatm.h: include linux/time.h"
2016-11-13 12:35:13 -05:00
UPSTREAM: bpf: Emit audit messages upon successful prog load and unload
2026-05-15 17:59:18 +07:00
autofs4: move linux/auto_dev-ioctl.h to uapi/linux
2016-10-11 15:06:31 -07:00
autofs: move inclusion of linux/limits.h to uapi
2016-10-11 15:06:31 -07:00
power: vm-bms: Add snapshot of qpnp-vm-bms driver
2018-05-02 17:19:36 +05:30
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
soc: qcom: bgdaemon: add uevent support for TWM BG
2020-03-16 20:57:55 -07:00
BACKPORT: bpf: Add mmap() support for BPF_MAP_TYPE_ARRAY
2026-05-15 17:59:15 +07:00
UPSTREAM: bpf: add comments to BPF ld/ldx sizes
2026-05-15 17:56:05 +07:00
BACKPORT: bpf: correct broken uapi for BPF_PROG_TYPE_PERF_EVENT program type
2026-05-15 17:59:13 +07:00
UPSTREAM: net: add skeleton of bpfilter kernel module
2026-05-15 17:56:31 +07:00
net: bpqether.h: remove if_ether.h guard
2016-11-13 00:57:53 -05:00
ipmi: add an Aspeed BT IPMI BMC driver
2016-09-29 19:05:06 -05:00
UPSTREAM: bpf: add specification for BTF Var and DataSec kinds
2026-05-15 17:57:36 +07:00
Btrfs: catch invalid free space trees
2016-10-03 18:52:14 +02:00
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
can: raw: raw_setsockopt: limit number of can_filter that can be set
2016-12-07 10:45:57 +01:00
capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
2022-11-25 17:35:35 +01:00
cec: move cec headers to uapi directory
2020-06-22 14:15:29 +05:30
cec: move cec headers to uapi directory
2020-06-22 14:15:29 +05:30
uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side headers
2019-08-06 18:29:38 +02:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
Merge android-4.9.219(6ee8be4) into msm-4.9
2020-04-28 15:06:13 +08:00
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
BACKPORT: sock: add MSG_ZEROCOPY
2026-05-15 17:55:01 +07:00
esoc: Add provision to handle shutdown request in userspace
2017-10-27 16:39:16 -07:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
eventpoll.h: fix epoll event masks
2018-03-22 09:17:38 +01:00
vfs: add a FALLOC_FL_UNSHARE mode to fallocate to unshare a range of blocks
2016-10-03 09:11:14 -07:00
UPSTREAM: audit: Record fanotify access control decisions
2026-05-15 17:59:18 +07:00
statx: Add a system call to make enhanced file info available
2025-07-10 14:15:39 -04:00
include: fib: Remove the deprecated UID fields
2017-09-06 15:09:16 -07:00
crypto: msm: Add QTI crypto drivers
2017-04-11 16:49:21 -07:00
Merge android-4.9.149 ( ed0b11d) into msm-4.9
2019-02-12 11:18:51 +08:00
Merge android-4.9.181 ( 6ccab84) into msm-4.9
2019-08-07 15:58:44 +08:00
input: misc: hbtp_input: support active blob flag
2018-02-28 14:42:44 -08:00
UPSTREAM: hw_breakpoint: Allow watchpoint of length 3,5,6 and 7
2017-03-13 15:31:05 -07:00
uapi glibc compat: fix outer guard of net device flags enum
2016-12-06 10:43:32 -05:00
msm_rmnet: merge support for RAWIP msm_rmnet device
2016-11-01 13:52:41 -06:00
Merge android-4.9.160 ( fd5657a) into msm-4.9
2019-03-21 14:06:06 +08:00
BACKPORT: xdp: support simultaneous driver and hw XDP attachment
2026-05-15 17:57:52 +07:00
net: l2tp: deprecate PPPOL2TP_MSG_* in favour of L2TP_MSG_*
2020-05-27 16:41:53 +02:00
ANDROID: net: move PPPoLAC and PPPoPNS headers to uapi
2017-01-19 13:32:06 -08:00
ANDROID: net: move PPPoLAC and PPPoPNS headers to uapi
2017-01-19 13:32:06 -08:00
ANDROID: net: add PPP on PPTP Network Server (PPPoPNS) driver.
2017-01-19 13:32:03 -08:00
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
2016-09-25 23:34:19 +02:00
UPSTREAM: xsk: Fix umem fill/completion queue mmap on 32-bit
2026-05-15 17:57:49 +07:00
UPSTREAM: tcp_diag: report TCP MD5 signing keys and addresses
2026-05-15 17:55:21 +07:00
Revert "ANDROID: ALSA: jack: Update supported jack switch types"
2026-01-06 16:27:45 +02:00
UPSTREAM: HID: sony: Report DS4 motion sensors through a separate device
2018-10-24 17:03:59 -07:00
ion: add snapshot of ion support for MSM
2016-11-03 12:43:03 -07:00
netfilter: nf_defrag_ipv4: Add sysctl to disable per interface
2018-01-10 19:42:37 -07:00
msm: ipa: add support for HW stats to QMI
2018-05-04 16:09:13 +05:30
BACKPORT: ipv6: implement dataplane support for rthdr type 4 (Segment Routing Header)
2026-05-15 17:54:16 +07:00
net: ipv6: RTF_PCPU should not be settable from userspace
2017-05-03 08:36:36 -07:00
include/uapi/linux/ipx.h: fix conflicting defitions with glibc netipx/ipx.h
2016-08-22 16:25:15 -07:00
install several missing uapi headers
2020-08-21 11:01:49 +02:00
UPSTREAM: kcov: support comparison operands collection
2017-12-18 15:21:35 -08:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
x86/kvm/hyper-v: Explicitly align hcall param for kvm_hyperv_exit
2020-06-20 10:24:14 +02:00
uapi: fix linux/if_pppol2tp.h userspace compilation errors
2020-06-03 08:16:33 +02:00
uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define
2019-02-20 10:18:35 +01:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
BACKPORT: loop: Add LOOP_CONFIGURE ioctl
2020-08-11 09:26:34 +02:00
BACKPORT: bpf: BPF for lightweight tunnel infrastructure
2026-05-15 17:54:17 +07:00
ANDROID: sdcardfs: Change magic value
2017-01-31 10:47:24 -08:00
uapi: Add display-related uapi headers for Android compilation
2017-03-23 13:55:19 -07:00
[media] media: Add 1X16 16-bit raw bayer media bus code definitions
2016-09-09 11:16:36 -03:00
[media] v4l2-core: Add support for touch devices
2016-08-23 16:28:04 -03:00
msm: mhi_dev: Add cv2x HW channel support in MHI driver
2019-07-30 05:53:20 -07:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h>
2020-09-12 11:47:36 +02:00
drivers: soc: qcom: Snapshot of idle/sleep driver as of msm-4.4
2017-02-23 08:41:47 -07:00
uapi: Add missing header file msm_dsps.h.
2017-03-23 13:52:08 -07:00
ion: add snapshot of ion support for MSM
2016-11-03 12:43:03 -07:00
msm: ipa3: Send pipe info based on tethering protocol
2020-04-02 23:57:00 +05:30
net: ipc_router: Add snapshot of IPC Router
2016-11-11 17:02:27 -08:00
msm: kgsl: Log context type in case of GPU faults
2018-10-15 16:06:11 +05:30
msm: mdss: Allow resource update during secure UI
2020-03-05 05:50:00 +05:30
msm: mdss: Add support to update backlight when display commit
2018-06-20 17:51:10 +05:30
net: rmnet_data: Add snapshot of rmnet_data driver
2016-11-01 20:02:26 -06:00
uapi: Add display-related uapi headers for Android compilation
2017-03-23 13:55:19 -07:00
include: Add snapshot of vidc encoder and decoder headers in msm-4.9
2018-05-22 20:34:11 -07:00
include: Add snapshot of vidc encoder and decoder headers in msm-4.9
2018-05-22 20:34:11 -07:00
net: rmnet_data: Add snapshot of rmnet_data driver
2016-11-01 20:02:26 -06:00
UPSTREAM: net: add new control message for incoming HW-timestamped packets
2026-05-15 17:55:02 +07:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
uapi: fix linux/nfc.h userspace compilation errors
2022-01-05 12:31:25 +01:00
nfs: add a new NFS4_OPEN_RESULT_MAY_NOTIFY_LOCK constant
2016-09-26 15:20:37 -04:00
nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header
2019-07-21 09:06:04 +02:00
nl80211: add WPA3 definition for SAE authentication
2024-12-13 22:46:35 +01:00
nsfs: add ioctl to get a parent namespace
2016-09-22 19:59:41 -05:00
drivers misc: add okl4-link-shbuf driver
2018-12-09 18:41:17 -08:00
BACKPORT: openvswitch: add erspan version I and II support
2026-05-15 17:56:40 +07:00
uapi: fix linux/packet_diag.h userspace compilation error
2017-03-22 12:43:34 +01:00
Merge remote-tracking branch 'common/android-4.9-q' into lineage-18.1-caf-sdm845
2021-12-27 02:07:39 +02:00
BACKPORT: perf, bpf: Introduce PERF_RECORD_BPF_EVENT
2026-05-15 17:58:54 +07:00
UPSTREAM: bpf: expose prog id for cls_bpf and act_bpf
2026-05-15 17:54:51 +07:00
net_sched: Add flow control support to prio qdisc
2017-03-22 17:37:14 -06:00
posix_acl: uapi header split
2016-09-27 21:52:00 -04:00
posix_acl: uapi header split
2016-09-27 21:52:00 -04:00
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
Merge android-4.9.176 ( e0625b3) into msm-4.9
2019-06-13 14:31:04 +08:00
arm/arm64: KVM: Add PSCI_VERSION helper
2018-04-20 08:21:04 +02:00
include: uapi: Add QBG UAPI headers
2021-06-29 14:18:55 +05:30
include: uapi: Add QBG UAPI headers
2021-06-29 14:18:55 +05:30
qbt1000: Add support for fingerprint gestures
2018-02-14 20:40:01 +05:30
msm: crypto: Add support for map and unmap ioctls
2018-04-20 10:56:50 -07:00
uapi: Add missing Secure System uapi header files for sdm845
2017-03-13 18:08:32 -07:00
power: qpnp-qg: Add support for PMI632 v2.0
2018-06-18 11:37:25 +05:30
power: qpnp-qg: Add support for voltage-only mode of QG
2019-01-17 17:27:28 +05:30
uapi: Add missing Secure System uapi header files for sdm845
2017-03-13 18:08:32 -07:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
ice: msm: Encrypt only userdata
2018-06-01 14:39:35 +05:30
random: ignore GRND_RANDOM in getentropy(2)
2022-06-25 11:45:02 +02:00
uapi: fix linux/rds.h userspace compilation errors
2017-11-21 09:23:28 +01:00
net: rmnet_data: Add support to configure custom device name
2017-03-22 12:26:21 -06:00
msm: ipa: Add support for per client lan statistics
2017-10-30 23:23:51 +05:30
UPSTREAM: net: ipv4: add new RTM_F_FIB_MATCH flag for use with RTM_GETROUTE
2026-05-15 17:54:44 +07:00
BACKPORT: clone: add CLONE_PIDFD
2019-09-03 13:44:48 -07:00
seccomp: Add filter flag to opt-out of SSB mitigation
2018-05-22 16:58:01 +02:00
seemp: read hypervisor rooting detections
2017-07-12 10:12:23 -07:00
seemp: read hypervisor rooting detections
2017-07-12 10:12:23 -07:00
UPSTREAM: ipv6: sr: remove cleanup flag and fix HMAC computation
2026-05-15 17:54:25 +07:00
UPSTREAM: ipv6: sr: add code base for control plane support of SR-IPv6
2026-05-15 17:54:16 +07:00
BACKPORT: ipv6: sr: add core files for SR HMAC support
2026-05-15 17:54:16 +07:00
UPSTREAM: ipv6: sr: add support for SRH encapsulation and injection with lwtunnels
2026-05-15 17:54:16 +07:00
serial: Add UART port for EUD
2016-09-01 16:17:11 -07:00
serial: 8250: Define RX trigger levels for OxSemi 950 devices
2021-09-22 11:43:06 +02:00
uapi: Add UAPI headers for slatecom_interface driver
2021-09-09 15:16:49 +05:30
uapi: Add missing Secure System uapi header files for sdm845
2017-03-13 18:08:32 -07:00
BACKPORT: tcp: export packets delivery info
2026-05-15 17:58:43 +07:00
net: Add snapshot of sockev module
2017-03-29 16:54:34 -07:00
spcom: move SPCOM_MAX_CHANNELS define to uapi/linux/spcom.h
2017-08-13 08:35:44 -07:00
statx: Add a system call to make enhanced file info available
2025-07-10 14:15:39 -04:00
include/uapi/linux/swab: Fix potentially missing __always_inline
2023-01-07 12:07:28 +01:00
dma-buf/sync_file: fix documentation error
2016-09-20 18:12:38 +05:30
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
BACKPORT: delayacct: track delays from thrashing cache pages
2019-03-22 14:08:39 -07:00
BACKPORT: tcp: add dsack blocks received stats
2026-05-15 17:58:44 +07:00
BACKPORT: tee: add register user memory
2018-02-21 15:40:42 +00:00
Revert "rtc: alarm: Add power-on alarm feature"
2017-11-01 01:19:42 -07:00
tipc: Avoid copying bytes beyond the supplied data
2019-06-11 12:22:34 +02:00
tipc: add the ability to get UDP options via netlink
2016-08-26 21:38:41 -07:00
UPSTREAM: tls: RX path for ktls
2026-05-15 17:58:23 +07:00
tty: actually undefine superseded ASYNC flags
2021-05-22 10:40:24 +02:00
msm: vidc: Add support for setting dynamic QP range
2019-05-19 14:09:11 +05:30
[media] SDI: add flag for SDI formats and SMPTE 125M definition
2016-09-19 14:34:41 -03:00
Merge remote-tracking branch 'common/android-4.9-q' into android13-4.9-sdm845
2022-11-09 19:25:28 +02:00
power: vm-bms: Add snapshot of qpnp-vm-bms driver
2018-05-02 17:19:36 +05:30
UPSTREAM: wireguard: global: fix spelling mistakes in comments
2021-03-23 02:09:21 +02:00
BACKPORT: xfrm: Add a new lookup key to match xfrm interfaces.
2018-10-26 21:39:51 -07:00
f1aafa8dc8