Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditsc.c Create Date:2022-07-28 11:27:29
Last Modify:2020-03-17 16:31:21 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:show_special

Proto:static void show_special(struct audit_context *context, int *call_panic)

Type:void

Parameter:

TypeParameterName
struct audit_context *context
int *call_panic
1193  ab = audit_log_start - obtain an audit buffer*@ctx: audit_context (may be NULL)*@gfp_mask: type of allocation*@type: audit message type* Returns audit_buffer pointer on success or NULL on error
1194  If Not ab Then Return
1198  Case type == sys_socketcall arguments
1199  nargs = nargs
1200  audit_log_format - format a message into the audit buffer.*@ab: audit_buffer*@fmt: format string*@...: optional parameters matching @fmt string* All the work is done in audit_log_vformat.
1201  When i < nargs cycle audit_log_format - format a message into the audit buffer.*@ab: audit_buffer*@fmt: format string*@...: optional parameters matching @fmt string* All the work is done in audit_log_vformat.
1204  Break
1205  Case type == IPC record
1206  osid = osid
1208  audit_log_format - format a message into the audit buffer.*@ab: audit_buffer*@fmt: format string*@...: optional parameters matching @fmt string* All the work is done in audit_log_vformat.
1212  If osid Then
1213  char * ctx = NULL
1215  If security_secid_to_secctx(osid, & ctx, & len) Then
1218  Else
1223  If has_perm Then
1224  audit_log_end - end one audit record*@ab: the audit_buffer* We can not do a netlink send inside an irq context because it blocks (last* arg, flags, is not set to MSG_DONTWAIT), so the audit buffer is placed on a* queue and a tasklet is scheduled to remove
1225  ab = audit_log_start - obtain an audit buffer*@ctx: audit_context (may be NULL)*@gfp_mask: type of allocation*@type: audit message type* Returns audit_buffer pointer on success or NULL on error
1227  If Value for the false possibility is greater at compile time(!ab) Then Return
1229  audit_log_format - format a message into the audit buffer.*@ab: audit_buffer*@fmt: format string*@...: optional parameters matching @fmt string* All the work is done in audit_log_vformat.
1236  Break
1237  Case type == POSIX MQ open record type
1238  audit_log_format - format a message into the audit buffer.*@ab: audit_buffer*@fmt: format string*@...: optional parameters matching @fmt string* All the work is done in audit_log_vformat.
1246  Break
1247  Case type == POSIX MQ send/receive record type
1248  audit_log_format - format a message into the audit buffer.*@ab: audit_buffer*@fmt: format string*@...: optional parameters matching @fmt string* All the work is done in audit_log_vformat.
1256  Break
1257  Case type == POSIX MQ notify record type
1258  audit_log_format - format a message into the audit buffer.*@ab: audit_buffer*@fmt: format string*@...: optional parameters matching @fmt string* All the work is done in audit_log_vformat.
1261  Break
1262  Case type == POSIX MQ get/set attribute record type
1263  attr = mqstat
1264  audit_log_format - format a message into the audit buffer.*@ab: audit_buffer*@fmt: format string*@...: optional parameters matching @fmt string* All the work is done in audit_log_vformat.
1270  Break
1271  Case type == Record showing argument to sys_capset
1272  audit_log_format - format a message into the audit buffer.*@ab: audit_buffer*@fmt: format string*@...: optional parameters matching @fmt string* All the work is done in audit_log_vformat.
1273  audit_log_cap(ab, "cap_pi", & inheritable)
1274  audit_log_cap(ab, "cap_pp", & permitted)
1275  audit_log_cap(ab, "cap_pe", & effective set of process )
1276  audit_log_cap(ab, "cap_pa", & ambient)
1277  Break
1278  Case type == Record showing descriptor and flags in mmap
1279  audit_log_format - format a message into the audit buffer.*@ab: audit_buffer*@fmt: format string*@...: optional parameters matching @fmt string* All the work is done in audit_log_vformat.
1281  Break
1282  Case type == xecve arguments
1283  audit_log_execve_info(context, & ab)
1284  Break
1285  Case type == Kernel Module events
1286  audit_log_format - format a message into the audit buffer.*@ab: audit_buffer*@fmt: format string*@...: optional parameters matching @fmt string* All the work is done in audit_log_vformat.
1287  If name Then
1288  audit_log_untrustedstring - log a string that may contain random characters*@ab: audit_buffer*@string: string to be logged* Same as audit_log_n_untrustedstring(), except that strlen is used to* determine string length.
1289  Else audit_log_format - format a message into the audit buffer.*@ab: audit_buffer*@fmt: format string*@...: optional parameters matching @fmt string* All the work is done in audit_log_vformat.
1292  Break
1294  audit_log_end - end one audit record*@ab: the audit_buffer* We can not do a netlink send inside an irq context because it blocks (last* arg, flags, is not set to MSG_DONTWAIT), so the audit buffer is placed on a* queue and a tasklet is scheduled to remove
Caller
NameDescribe
audit_log_exit