[PATCH] syscall class hookup for all normal targets
[linux-2.6.git] / lib / audit.c
1 #include <linux/init.h>
2 #include <linux/types.h>
3 #include <linux/audit.h>
4 #include <asm/unistd.h>
5
6 static unsigned dir_class[] = {
7 #include <asm-generic/audit_dir_write.h>
8 ~0U
9 };
10
11 static unsigned read_class[] = {
12 #include <asm-generic/audit_read.h>
13 ~0U
14 };
15
16 static unsigned write_class[] = {
17 #include <asm-generic/audit_write.h>
18 ~0U
19 };
20
21 static unsigned chattr_class[] = {
22 #include <asm-generic/audit_change_attr.h>
23 ~0U
24 };
25
26 int audit_classify_syscall(int abi, unsigned syscall)
27 {
28         switch(syscall) {
29         case __NR_open:
30                 return 2;
31         case __NR_openat:
32                 return 3;
33 #ifdef __NR_socketcall
34         case __NR_socketcall:
35                 return 4;
36 #endif
37         case __NR_execve:
38                 return 5;
39         default:
40                 return 0;
41         }
42 }
43
44 static int __init audit_classes_init(void)
45 {
46         audit_register_class(AUDIT_CLASS_WRITE, write_class);
47         audit_register_class(AUDIT_CLASS_READ, read_class);
48         audit_register_class(AUDIT_CLASS_DIR_WRITE, dir_class);
49         audit_register_class(AUDIT_CLASS_CHATTR, chattr_class);
50         return 0;
51 }
52
53 __initcall(audit_classes_init);