riscv: audit: add audit hook in do_syscall_trace_enter/exit() (0aea8943) · Commits · 戴 / test

This patch adds auditing functions on entry to and exit from every system call invocation. Signed-off-by:

arch/riscv/kernel/ptrace.c

+5 −0

Original line number	Diff line number	Diff line
		@@ -18,6 +18,7 @@
		#include <asm/ptrace.h>
		#include <asm/syscall.h>
		#include <asm/thread_info.h>
		#include <linux/audit.h>
		#include <linux/ptrace.h>
		#include <linux/elf.h>
		#include <linux/regset.h>
		@@ -163,10 +164,14 @@ void do_syscall_trace_enter(struct pt_regs *regs)
		if (test_thread_flag(TIF_SYSCALL_TRACEPOINT))
		trace_sys_enter(regs, syscall_get_nr(current, regs));
		#endif

		audit_syscall_entry(regs->a7, regs->a0, regs->a1, regs->a2, regs->a3);
		}

		void do_syscall_trace_exit(struct pt_regs *regs)
		{
		audit_syscall_exit(regs);

		if (test_thread_flag(TIF_SYSCALL_TRACE))
		tracehook_report_syscall_exit(regs, 0);