lsm_audit.h 2.73 KB
Newer Older
1
/* SPDX-License-Identifier: GPL-2.0 */
2 3 4 5 6 7
/*
 * Common LSM logging functions
 * Heavily borrowed from selinux/avc.h
 *
 * Author : Etienne BASSET  <etienne.basset@ensta.org>
 *
8
 * All credits to : Stephen Smalley, <sds@tycho.nsa.gov>
9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
 * All BUGS to : Etienne BASSET  <etienne.basset@ensta.org>
 */
#ifndef _LSM_COMMON_LOGGING_
#define _LSM_COMMON_LOGGING_

#include <linux/stddef.h>
#include <linux/errno.h>
#include <linux/kernel.h>
#include <linux/kdev_t.h>
#include <linux/spinlock.h>
#include <linux/init.h>
#include <linux/audit.h>
#include <linux/in6.h>
#include <linux/path.h>
#include <linux/key.h>
#include <linux/skbuff.h>
25
#include <rdma/ib_verbs.h>
26

27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43
struct lsm_network_audit {
	int netif;
	struct sock *sk;
	u16 family;
	__be16 dport;
	__be16 sport;
	union {
		struct {
			__be32 daddr;
			__be32 saddr;
		} v4;
		struct {
			struct in6_addr daddr;
			struct in6_addr saddr;
		} v6;
	} fam;
};
44

45 46 47 48 49
struct lsm_ioctlop_audit {
	struct path path;
	u16 cmd;
};

50 51 52 53 54
struct lsm_ibpkey_audit {
	u64	subnet_prefix;
	u16	pkey;
};

55 56 57 58 59
struct lsm_ibendport_audit {
	char	dev_name[IB_DEVICE_NAME_MAX];
	u8	port;
};

60 61
/* Auxiliary data to use in generating the audit record. */
struct common_audit_data {
62
	char type;
63
#define LSM_AUDIT_DATA_PATH	1
64 65 66 67 68
#define LSM_AUDIT_DATA_NET	2
#define LSM_AUDIT_DATA_CAP	3
#define LSM_AUDIT_DATA_IPC	4
#define LSM_AUDIT_DATA_TASK	5
#define LSM_AUDIT_DATA_KEY	6
69
#define LSM_AUDIT_DATA_NONE	7
70
#define LSM_AUDIT_DATA_KMOD	8
71
#define LSM_AUDIT_DATA_INODE	9
72
#define LSM_AUDIT_DATA_DENTRY	10
73
#define LSM_AUDIT_DATA_IOCTL_OP	11
74
#define LSM_AUDIT_DATA_FILE	12
75
#define LSM_AUDIT_DATA_IBPKEY	13
76
#define LSM_AUDIT_DATA_IBENDPORT 14
77
	union 	{
78
		struct path path;
79
		struct dentry *dentry;
80
		struct inode *inode;
81
		struct lsm_network_audit *net;
82 83 84 85 86 87 88 89 90
		int cap;
		int ipc_id;
		struct task_struct *tsk;
#ifdef CONFIG_KEYS
		struct {
			key_serial_t key;
			char *key_desc;
		} key_struct;
#endif
91
		char *kmod_name;
92
		struct lsm_ioctlop_audit *op;
93
		struct file *file;
94
		struct lsm_ibpkey_audit *ibpkey;
95
		struct lsm_ibendport_audit *ibendport;
96 97 98
	} u;
	/* this union contains LSM specific data */
	union {
99
#ifdef CONFIG_SECURITY_SMACK
100
		struct smack_audit_data *smack_audit_data;
101 102
#endif
#ifdef CONFIG_SECURITY_SELINUX
103
		struct selinux_audit_data *selinux_audit_data;
104 105
#endif
#ifdef CONFIG_SECURITY_APPARMOR
106
		struct apparmor_audit_data *apparmor_audit_data;
107
#endif
108
	}; /* per LSM data pointer union */
109 110 111 112 113 114 115 116 117 118 119
};

#define v4info fam.v4
#define v6info fam.v6

int ipv4_skb_to_auditdata(struct sk_buff *skb,
		struct common_audit_data *ad, u8 *proto);

int ipv6_skb_to_auditdata(struct sk_buff *skb,
		struct common_audit_data *ad, u8 *proto);

120 121 122
void common_lsm_audit(struct common_audit_data *a,
	void (*pre_audit)(struct audit_buffer *, void *),
	void (*post_audit)(struct audit_buffer *, void *));
123 124

#endif