mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2026-04-03 12:05:13 +02:00
[ Upstream commit 4f493a6079 ]
fchmodat2(), introduced in version 6.6 is currently not in the change
attribute class of audit. Calling fchmodat2() to change a file
attribute in the same fashion than chmod() or fchmodat() will bypass
audit rules such as:
-w /tmp/test -p rwa -k test_rwa
The current patch adds fchmodat2() to the change attributes class.
Signed-off-by: Jeffrey Bencteux <jeff@bencteux.fr>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
37 lines
529 B
C
37 lines
529 B
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
#ifdef __NR_chmod
|
|
__NR_chmod,
|
|
#endif
|
|
__NR_fchmod,
|
|
#ifdef __NR_chown
|
|
__NR_chown,
|
|
__NR_lchown,
|
|
#endif
|
|
#ifdef __NR_fchown
|
|
__NR_fchown,
|
|
#endif
|
|
__NR_setxattr,
|
|
__NR_lsetxattr,
|
|
__NR_fsetxattr,
|
|
__NR_removexattr,
|
|
__NR_lremovexattr,
|
|
__NR_fremovexattr,
|
|
#ifdef __NR_fchownat
|
|
__NR_fchownat,
|
|
__NR_fchmodat,
|
|
#endif
|
|
#ifdef __NR_fchmodat2
|
|
__NR_fchmodat2,
|
|
#endif
|
|
#ifdef __NR_chown32
|
|
__NR_chown32,
|
|
__NR_fchown32,
|
|
__NR_lchown32,
|
|
#endif
|
|
#ifdef __NR_link
|
|
__NR_link,
|
|
#endif
|
|
#ifdef __NR_linkat
|
|
__NR_linkat,
|
|
#endif
|