Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\audit.c Create Date:2022-07-28 11:23:57
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:audit_signal_info - record signal info for shutting down audit subsystem*@sig: signal value*@t: task being signaled* If the audit subsystem is being terminated, record the task (pid)* and uid that is doing that.

Proto:int audit_signal_info(int sig, struct task_struct *t)

Type:int

Parameter:

TypeParameterName
intsig
struct task_struct *t
2276  uid = current_uid()
2278  If auditd_test_task - Check to see if a given task is an audit daemon*@task: the task to check* Description:* Return 1 if the task is a registered audit daemon, 0 otherwise. && ( sig == SIGTERM || sig == SIGHUP || sig == SIGUSR1 || sig == SIGUSR2 ) Then
2281  audit_sig_pid = task_tgid_nr(current process)
2282  auid = audit_get_loginuid(current process)
2283  If uid_valid(auid) Then The identity of the user shutting down the audit system. = auid
2285  Else The identity of the user shutting down the audit system. = uid
2287  security_task_getsecid(current process, & audit_sig_sid)
2290  Return audit_signal_info_syscall(t)