linux-stable.git/include/linux/audit.h, branch linux-2.6.29.y

audit: validate comparison operations, store them in sane form

2009-01-04T20:14:42+00:00

Don't store the field->op in the messy (and very inconvenient for e.g.
audit_comparator()) form; translate to dense set of values and do full
validation of userland-submitted value while we are at it.

->audit_init_rule() and ->audit_match_rule() get new values now; in-tree
instances updated.

Signed-off-by: Al Viro

audit rules ordering, part 2

2009-01-04T20:14:42+00:00

Fix the actual rule listing; add per-type lists _not_ used for matching,
with all exit,... sitting on one such list.  Simplifies "do something
for all rules" logics, while we are at it...

Signed-off-by: Al Viro

fixing audit rule ordering mess, part 1

2009-01-04T20:14:41+00:00

Problem: ordering between the rules on exit chain is currently lost;
all watch and inode rules are listed after everything else _and_
exit,never on one kind doesn't stop exit,always on another from
being matched.

Solution: assign priorities to rules, keep track of the current
highest-priority matching rule and its result (always/never).

Signed-off-by: Al Viro

sanitize audit_log_capset()

2009-01-04T20:14:41+00:00

* no allocations
* return void
* don't duplicate checked for dummy context

Signed-off-by: Al Viro

sanitize audit_fd_pair()

2009-01-04T20:14:41+00:00

* no allocations
* return void

Signed-off-by: Al Viro

sanitize audit_mq_open()

2009-01-04T20:14:41+00:00

* don't bother with allocations
* don't do double copy_from_user()
* don't duplicate parts of check for audit_dummy_context()

Signed-off-by: Al Viro

sanitize AUDIT_MQ_SENDRECV

2009-01-04T20:14:40+00:00

* logging the original value of *msg_prio in mq_timedreceive(2)
  is insane - the argument is write-only (i.e. syscall always
  ignores the original value and only overwrites it).
* merge __audit_mq_timed{send,receive}
* don't do copy_from_user() twice
* don't mess with allocations in auditsc part
* ... and don't bother checking !audit_enabled and !context in there -
  we'd already checked for audit_dummy_context().

Signed-off-by: Al Viro

sanitize audit_mq_notify()

2009-01-04T20:14:40+00:00

* don't copy_from_user() twice
* don't bother with allocations
* don't duplicate parts of audit_dummy_context()
* make it return void

Signed-off-by: Al Viro

sanitize audit_mq_getsetattr()

2009-01-04T20:14:40+00:00

* get rid of allocations
* make it return void
* don't duplicate parts of audit_dummy_context()

Signed-off-by: Al Viro

sanitize audit_ipc_set_perm()

2009-01-04T20:14:40+00:00

* get rid of allocations
* make it return void
* simplify callers

Signed-off-by: Al Viro