On Wed, Feb 18, 2015 at 7:10 PM, Davidlohr Bueso <dbueso@xxxxxxx> wrote: > From: Davidlohr Bueso <dave@xxxxxxxxxxxx> > > This patch adds a audit_log_d_path_exe() helper function > to share how we handle auditing of the exe_file's path. > Used by both audit and auditsc. No functionality is changed. > > Cc: Paul Moore <paul@xxxxxxxxxxxxxx> > Cc: Eric Paris <eparis@xxxxxxxxxx> > Cc: linux-audit@xxxxxxxxxx > Signed-off-by: Davidlohr Bueso <dbueso@xxxxxxx> > --- > > Compile tested only. > > kernel/audit.c | 9 +-------- > kernel/audit.h | 14 ++++++++++++++ > kernel/auditsc.c | 9 +-------- > 3 files changed, 16 insertions(+), 16 deletions(-) I'd prefer if the audit_log_d_path_exe() helper wasn't a static inline. > --- a/kernel/audit.h > +++ b/kernel/audit.h > @@ -257,6 +257,20 @@ extern struct list_head audit_filter_list[]; > > extern struct audit_entry *audit_dupe_rule(struct audit_krule *old); > > +static inline void audit_log_d_path_exe(struct audit_buffer *ab, > + struct mm_struct *mm) > +{ > + if (!mm) { > + audit_log_format(ab, " exe=(null)"); > + return; > + } > + > + down_read(&mm->mmap_sem); > + if (mm->exe_file) > + audit_log_d_path(ab, " exe=", &mm->exe_file->f_path); > + up_read(&mm->mmap_sem); > +} > + > /* audit watch functions */ > #ifdef CONFIG_AUDIT_WATCH > extern void audit_put_watch(struct audit_watch *watch); -- paul moore www.paul-moore.com -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@xxxxxxxxx. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: <a href=mailto:"dont@xxxxxxxxx"> email@xxxxxxxxx </a>