1// SPDX-License-Identifier: GPL-2.0
2#include <linux/init.h>
3#include <linux/types.h>
4#include <linux/audit.h>
5#include <asm/unistd.h>
6#include "audit.h"
7
8static unsigned dir_class[] = {
9#include <asm-generic/audit_dir_write.h>
10~0U
11};
12
13static unsigned read_class[] = {
14#include <asm-generic/audit_read.h>
15~0U
16};
17
18static unsigned write_class[] = {
19#include <asm-generic/audit_write.h>
20~0U
21};
22
23static unsigned chattr_class[] = {
24#include <asm-generic/audit_change_attr.h>
25~0U
26};
27
28static unsigned signal_class[] = {
29#include <asm-generic/audit_signal.h>
30~0U
31};
32
33int audit_classify_arch(int arch)
34{
35#ifdef CONFIG_COMPAT
36 if (arch == AUDIT_ARCH_S390)
37 return 1;
38#endif
39 return 0;
40}
41
42int audit_classify_syscall(int abi, unsigned syscall)
43{
44#ifdef CONFIG_COMPAT
45 if (abi == AUDIT_ARCH_S390)
46 return s390_classify_syscall(syscall);
47#endif
48 switch(syscall) {
49 case __NR_open:
50 return AUDITSC_OPEN;
51 case __NR_openat:
52 return AUDITSC_OPENAT;
53 case __NR_socketcall:
54 return AUDITSC_SOCKETCALL;
55 case __NR_execve:
56 return AUDITSC_EXECVE;
57 case __NR_openat2:
58 return AUDITSC_OPENAT2;
59 default:
60 return AUDITSC_NATIVE;
61 }
62}
63
64static int __init audit_classes_init(void)
65{
66#ifdef CONFIG_COMPAT
67 audit_register_class(AUDIT_CLASS_WRITE_32, list: s390_write_class);
68 audit_register_class(AUDIT_CLASS_READ_32, list: s390_read_class);
69 audit_register_class(AUDIT_CLASS_DIR_WRITE_32, list: s390_dir_class);
70 audit_register_class(AUDIT_CLASS_CHATTR_32, list: s390_chattr_class);
71 audit_register_class(AUDIT_CLASS_SIGNAL_32, list: s390_signal_class);
72#endif
73 audit_register_class(AUDIT_CLASS_WRITE, list: write_class);
74 audit_register_class(AUDIT_CLASS_READ, list: read_class);
75 audit_register_class(AUDIT_CLASS_DIR_WRITE, list: dir_class);
76 audit_register_class(AUDIT_CLASS_CHATTR, list: chattr_class);
77 audit_register_class(AUDIT_CLASS_SIGNAL, list: signal_class);
78 return 0;
79}
80
81__initcall(audit_classes_init);
82

source code of linux/arch/s390/kernel/audit.c