George C. Wilson 20ca73bc79 [PATCH] Audit of POSIX Message Queue Syscalls v.2 ... This patch adds audit support to POSIX message queues. It applies cleanly to the lspp.b15 branch of Al Viro's git tree. There are new auxiliary data structures, and collection and emission routines in kernel/auditsc.c. New hooks in ipc/mqueue.c collect arguments from the syscalls. I tested the patch by building the examples from the POSIX MQ library tarball. Build them -lrt, not against the old MQ library in the tarball. Here's the URL: http://www.geocities.com/wronski12/posix_ipc/libmqueue-4.41.tar.gz Do auditctl -a exit,always -S for mq_open, mq_timedsend, mq_timedreceive, mq_notify, mq_getsetattr. mq_unlink has no new hooks. Please see the corresponding userspace patch to get correct output from auditd for the new record types. [fixes folded] Signed-off-by: George Wilson <ltcgcw@us.ibm.com> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>		2006-06-20 05:25:26 -04:00
..
compat.c	[PATCH] sem2mutex: ipc, id.sem	2006-03-26 08:56:55 -08:00
compat_mq.c
Makefile
mqueue.c	[PATCH] Audit of POSIX Message Queue Syscalls v.2	2006-06-20 05:25:26 -04:00
msg.c	[PATCH] update of IPC audit record cleanup	2006-06-20 05:25:24 -04:00
msgutil.c
sem.c	[PATCH] update of IPC audit record cleanup	2006-06-20 05:25:24 -04:00
shm.c	[PATCH] update of IPC audit record cleanup	2006-06-20 05:25:24 -04:00
util.c	[PATCH] Rework of IPC auditing	2006-05-01 06:10:04 -04:00
util.h	[PATCH] sem2mutex: ipc, id.sem	2006-03-26 08:56:55 -08:00