audit: add missing syscalls to PERM class tables

Browse source

Add missing file metadata syscalls to the audit PERM class tables,
addressing gaps where certain file operations were not properly
classified for audit rule matching.

Changes:
- audit_change_attr.h: Add file_setattr

- audit_read.h: Add quotactl_fd, file_getattr, stat, stat64, lstat,
  lstat64, fstat, fstat64, newfstatat, fstatat64, and statx

- audit_write.h: Add quotactl_fd

Architecture-specific and conditionally-compiled syscalls are guarded
with #ifdef.

Signed-off-by: Steve Grubb <sgrubb@redhat.com>
Signed-off-by: Ricardo Robaina <rrobaina@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>

...

This commit is contained in:

Ricardo Robaina 2026-06-12 11:14:36 -03:00 • committed by Paul Moore

parent dc59e4fea9

commit c0d73c0938

3 changed files with 37 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

3

include/asm-generic/audit_change_attr.h

View file

31

include/asm-generic/audit_read.h

View file

3

include/asm-generic/audit_write.h

View file