Documented in 1 files:
Defined in 1 files as a prototype:
Defined in 2 files as a function:
Referenced in 22 files:
- drivers/md/dm-audit.c, line 28
- drivers/tty/tty_audit.c, line 73
- include/net/xfrm.h, line 828
- kernel/audit.c
- kernel/audit_fsnotify.c, line 133
- kernel/audit_tree.c, line 534
- kernel/audit_watch.c, line 233
- kernel/auditfilter.c, line 1117
- kernel/auditsc.c
- kernel/bpf/syscall.c, line 2384
- net/netfilter/nft_log.c, line 37
- net/netfilter/xt_AUDIT.c, line 38
- net/netlabel/netlabel_user.c, line 91
- security/integrity/evm/evm_secfs.c, line 203
- security/integrity/ima/ima_api.c, line 418
- security/integrity/integrity.h, line 231
- security/integrity/integrity_audit.c, line 47
- security/ipe/audit.c
- security/landlock/audit.c
- security/lsm_audit.c, line 442
- security/selinux/hooks.c
- security/selinux/ss/services.c
Smatch caller information:
net/netfilter/nft_log.c nft_log_eval_audit() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 0 |
| PARAM_VALUE | 1 | gfp_mask | 2080 |
| PARAM_VALUE | 2 | type | 1324 |
net/xfrm/xfrm_state.c xfrm_audit_start() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 2080 |
| PARAM_VALUE | 2 | type | 1415 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &x->lock | ||
| HALF_LOCKED2 | bh |
kernel/audit_fsnotify.c audit_mark_log_rule_change() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3136 |
| PARAM_VALUE | 2 | type | 1305 |
kernel/bpf/syscall.c bpf_audit_prog() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 2080 |
| PARAM_VALUE | 2 | type | 1334 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c __audit_log_nfcfg() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 2080,3264 |
| PARAM_VALUE | 2 | type | 1325 |
| DATA_SOURCE | 1 | gfp_mask | $4 |
| HARD_MAX | 1 | gfp_mask | 3264 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c audit_core_dumps() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1701 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c audit_log_execve_info() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->context | 1-2 |
| PARAM_VALUE | 0 | ctx->current_state | 2 |
| PARAM_VALUE | 0 | ctx->dummy | 0 |
| PARAM_VALUE | 0 | ctx->execve.argc | s32min-(-1),1-s32max |
| PARAM_VALUE | 0 | ctx->personality | 0-u32max |
| PARAM_VALUE | 0 | ctx->prio | 1-u64max |
| PARAM_VALUE | 0 | ctx->type | 1309 |
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1309 |
| DATA_SOURCE | 0 | ctx | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c audit_log_exit() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->context | 1 |
| PARAM_VALUE | 0 | ctx->personality | 0-u32max |
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1300 |
| DATA_SOURCE | 0 | ctx | r audit_context |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c audit_log_exit() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->context | 1-2 |
| PARAM_VALUE | 0 | ctx->personality | 0-u32max |
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| DATA_SOURCE | 0 | ctx | r audit_context |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c audit_log_exit() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->context | 1-2 |
| PARAM_VALUE | 0 | ctx->fds | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->personality | 0-u32max |
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1317 |
| DATA_SOURCE | 0 | ctx | r audit_context |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c audit_log_exit() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->context | 1-2 |
| PARAM_VALUE | 0 | ctx->fds | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->personality | 0-u32max |
| PARAM_VALUE | 0 | ctx->sockaddr_len | 1-u64max |
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1306 |
| DATA_SOURCE | 0 | ctx | r audit_context |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c audit_log_exit() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->context | 1-2 |
| PARAM_VALUE | 0 | ctx->fds | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->personality | 0-u32max |
| PARAM_VALUE | 0 | ctx->pwd.dentry | 1-u64max |
| PARAM_VALUE | 0 | ctx->pwd.mnt | 1-u64max |
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1307 |
| CAPPED_DATA | 0 | ctx->sockaddr_len | 1 |
| DATA_SOURCE | 0 | ctx | r audit_context |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c audit_log_exit() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->context | 1-2 |
| PARAM_VALUE | 0 | ctx->fds | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->personality | 0-u32max |
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1320 |
| CAPPED_DATA | 0 | ctx->sockaddr_len | 1 |
| CAPPED_DATA | 0 | &ctx->names_list | 1 |
| DATA_SOURCE | 0 | ctx | r audit_context |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c audit_log_name() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->context | 1-2 |
| PARAM_VALUE | 0 | ctx->fds | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->personality | 0-u32max |
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1302 |
| CAPPED_DATA | 0 | ctx->sockaddr_len | 1 |
| DATA_SOURCE | 0 | ctx | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c audit_log_pid_context() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->context | 1-2 |
| PARAM_VALUE | 0 | ctx->fds | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->personality | 0-u32max |
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1318 |
| CAPPED_DATA | 0 | ctx->sockaddr_len | 1 |
| DATA_SOURCE | 0 | ctx | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c audit_log_proctitle() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1327 |
| DATA_SOURCE | 0 | ctx | r audit_context |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c audit_log_time() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->context | 1-2 |
| PARAM_VALUE | 0 | ctx->current_state | 2 |
| PARAM_VALUE | 0 | ctx->dummy | 0 |
| PARAM_VALUE | 0 | ctx->personality | 0-u32max |
| PARAM_VALUE | 0 | ctx->prio | 1-u64max |
| PARAM_VALUE | 0 | ctx->time.ntp_data.vals | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->type | 1333 |
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1333 |
| DATA_SOURCE | 0 | ctx | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c audit_log_time() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->context | 1-2 |
| PARAM_VALUE | 0 | ctx->current_state | 2 |
| PARAM_VALUE | 0 | ctx->dummy | 0 |
| PARAM_VALUE | 0 | ctx->personality | 0-u32max |
| PARAM_VALUE | 0 | ctx->prio | 1-u64max |
| PARAM_VALUE | 0 | ctx->time.ntp_data.vals | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->type | 1333 |
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1332 |
| DATA_SOURCE | 0 | ctx | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c audit_log_uring() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->context | 1-2 |
| PARAM_VALUE | 1 | gfp_mask | 2080 |
| PARAM_VALUE | 2 | type | 1336 |
| DATA_SOURCE | 0 | ctx | $0 |
| HARD_MAX | 0 | ctx->context | 2 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c audit_seccomp() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1326 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c audit_seccomp_actions_logged() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1305 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &pool->lock |
kernel/auditsc.c show_special() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->context | 1-2 |
| PARAM_VALUE | 0 | ctx->personality | 0-u32max |
| PARAM_VALUE | 0 | ctx->type | s32min-(-1),1-s32max |
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | ctx | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditsc.c show_special() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->context | 1-2 |
| PARAM_VALUE | 0 | ctx->current_state | 2 |
| PARAM_VALUE | 0 | ctx->dummy | 0 |
| PARAM_VALUE | 0 | ctx->ipc.has_perm | s32min-(-1),1-s32max |
| PARAM_VALUE | 0 | ctx->personality | 0-u32max |
| PARAM_VALUE | 0 | ctx->prio | 1-u64max |
| PARAM_VALUE | 0 | ctx->type | 1303 |
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1311 |
| DATA_SOURCE | 0 | ctx | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
drivers/tty/tty_audit.c tty_audit_log() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1319 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/audit.c audit_log() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 2080,3264 |
| PARAM_VALUE | 2 | type | 1331,1401,1403-1405,1700,2000 |
| DATA_SOURCE | 0 | ctx | $0 |
| DATA_SOURCE | 1 | gfp_mask | $1 |
| DATA_SOURCE | 2 | type | $2 |
| STR_LEN | 0 | ctx | 32,40,55,58,74,82,86,100 |
| STR_LEN | 0 | ctx | 32,40,55,58,74,82,86,100 |
| HARD_MAX | 1 | gfp_mask | 3264 |
| HARD_MAX | 2 | type | 2000 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | global &selinux_state.policy_mutex | ||
| HALF_LOCKED2 | rcu_read |
kernel/audit.c audit_log_common_recv_msg() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1005,1100-1199,1305,2100-2999 |
| DATA_SOURCE | 0 | ctx | $0 |
| DATA_SOURCE | 2 | type | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | type | 1005,1100-1123,1125-1199,2100-2999 |
| LOCK2 | global &audit_cmd_mutex.lock | ||
| HALF_LOCKED2 | global &hwsim_phys_lock | ||
| HALF_LOCKED2 | global &rtnl_mutex | ||
| HALF_LOCKED2 | global &rx_queue_mutex | ||
| HALF_LOCKED2 | rcu_read |
kernel/audit.c audit_log_config_change() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1305 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | global &audit_cmd_mutex.lock |
kernel/audit.c audit_log_feature_change() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1328 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | global &audit_cmd_mutex.lock | ||
| HALF_LOCKED2 | global &hwsim_phys_lock | ||
| HALF_LOCKED2 | global &rtnl_mutex | ||
| HALF_LOCKED2 | global &rx_queue_mutex | ||
| HALF_LOCKED2 | rcu_read |
kernel/audit.c audit_log_multicast() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1335 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/audit.c audit_log_path_denied() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1702-1703 |
| DATA_SOURCE | 2 | type | $0 |
| STR_LEN | 0 | ctx | 6,11,13,18,21 |
| HARD_MAX | 2 | type | 1703 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/audit.c audit_log_set_loginuid() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1006 |
net/netlabel/netlabel_user.c netlbl_audit_start_common() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 2080 |
| PARAM_VALUE | 2 | type | 1406-1410,1416-1419 |
| DATA_SOURCE | 2 | type | $0 |
| HARD_MAX | 2 | type | 1419 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | global &netlbl_domhsh_lock | ||
| HALF_LOCKED2 | rcu_read |
security/integrity/integrity_audit.c integrity_audit_message() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1800-1802,1804,1808 |
| DATA_SOURCE | 2 | type | $0 |
| FUZZY_MAX | 2 | type | 1808 |
| STR_LEN | 0 | ctx | (-1),6,8-20,22,31 |
| HARD_MAX | 2 | type | 1808 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
kernel/auditfilter.c audit_log_rule_change() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1305 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | global &audit_cmd_mutex.lock | ||
| HALF_LOCKED2 | global &hwsim_phys_lock | ||
| HALF_LOCKED2 | global &rtnl_mutex | ||
| HALF_LOCKED2 | global &rx_queue_mutex | ||
| HALF_LOCKED2 | rcu_read |
security/selinux/ss/services.c compute_sid_handle_invalid_context() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 2080 |
| PARAM_VALUE | 2 | type | 1401 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | rcu_read |
security/selinux/ss/services.c security_dump_masked_av() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 2080 |
| PARAM_VALUE | 2 | type | 1401 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | rcu_read |
security/selinux/ss/services.c security_sid_mls_copy() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 2080 |
| PARAM_VALUE | 2 | type | 1401 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | rcu_read |
security/lsm_audit.c common_lsm_audit() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 10272 |
| PARAM_VALUE | 2 | type | 1400 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
security/integrity/evm/evm_secfs.c evm_write_xattrs() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1806 |
| CAPABLE | 0 | 21 |
kernel/audit_watch.c audit_watch_log_rule_change() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3136 |
| PARAM_VALUE | 2 | type | 1305 |
| LOCK2 | global &audit_filter_mutex |
security/landlock/audit.c landlock_audit_denial() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 10272 |
| PARAM_VALUE | 2 | type | 1423 |
security/landlock/audit.c landlock_audit_free_domain() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1424 |
security/landlock/audit.c log_domain() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 10272 |
| PARAM_VALUE | 2 | type | 1424 |
| HALF_LOCKED2 | rcu_read |
kernel/audit_tree.c audit_tree_log_remove_rule() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1305 |
| DATA_SOURCE | 0 | ctx | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | global &audit_filter_mutex | ||
| HALF_LOCKED2 | global &audit_cmd_mutex.lock |
security/integrity/ima/ima_policy.c integrity_audit_log_start() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1807 |
| DATA_SOURCE | 0 | ctx | $0 |
| DATA_SOURCE | 1 | gfp_mask | $1 |
| DATA_SOURCE | 2 | type | $2 |
| HALF_LOCKED2 | global &ima_write_mutex |
drivers/md/dm-audit.c dm_audit_log_start() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1338-1339 |
| DATA_SOURCE | 2 | type | $0 |
| STR_LEN | 0 | ctx | 5-6,9 |
| HARD_MAX | 2 | type | 1339 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
net/xfrm/xfrm_policy.c xfrm_audit_start() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 2080 |
| PARAM_VALUE | 2 | type | 1415 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &net->xfrm.xfrm_cfg_mutex |
security/integrity/ima/ima_api.c ima_audit_measurement() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1805 |
| LOCK2 | &iint->mutex | ||
| TYPE_LOCK | (struct ima_iint_cache)->mutex |
security/ipe/audit.c ipe_audit_enforce() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1404 |
security/ipe/audit.c ipe_audit_match() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 10272 |
| PARAM_VALUE | 2 | type | 1420 |
| LOCK2 | rcu_read |
security/ipe/audit.c ipe_audit_policy_activation() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1421 |
| LOCK2 | &root->i_rwsem | ||
| HALF_LOCKED2 | global &ipe_policy_lock | ||
| TYPE_LOCK | (struct inode)->i_rwsem |
security/ipe/audit.c ipe_audit_policy_load() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 3264 |
| PARAM_VALUE | 2 | type | 1422 |
| HALF_LOCKED2 | &root->i_rwsem |
security/selinux/hooks.c selinux_inode_setxattr() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 2080 |
| PARAM_VALUE | 2 | type | 1401 |
security/selinux/hooks.c selinux_lsm_setattr() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | gfp_mask | 2080 |
| PARAM_VALUE | 2 | type | 1401 |
net/netfilter/xt_AUDIT.c audit_tg() -> audit_log_start()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 0 |
| PARAM_VALUE | 1 | gfp_mask | 2080 |
| PARAM_VALUE | 2 | type | 1324 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &table->lock | ||
| HALF_LOCKED2 | bh |