githubmirror/audit-userspace

lib/uringop_table.h
63 строки2 KB
Steve Grubb
update link
28 май 2025, 19:33
28 май 2025, 19:333cf4aaf
/* uringop_table.h --
 * Copyright 2005-24 Red Hat Inc.
 * All Rights Reserved.
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
 *
 * Authors:
 *      Richard Guy Briggs <rgb@redhat.com>
 */

/*
 *  Enums defined in include/uapi/linux/io_uring.h
 *  Operations defined here: io_uring/opdef.c
 *
 *  Note: not all ops are auditable for performance reasons. This was
 *  discussed on the linux-audit mail list:
 *  https://lists.linux-audit.osci.io/archives/list/linux-audit@lists.linux-audit.osci.io/thread/7VZ6IKS4XRP2UTSHURJDPH2N6LEEZG57/
 *
 *  Operations in opdef.c will have a field, audit_skip, if they are not
 *  auditable. Any operation missing this is auditable and needs to be added.
 */

_S(9,	"sendmsg")
_S(10,	"recvmsg")
_S(13,	"accept")
_S(16,	"connect")
_S(17,	"fallocate")
_S(18,	"openat")
_S(19,	"close")
_S(28,	"openat2")
_S(34,	"shutdown")
_S(35,	"renameat")
_S(36,	"unlinkat")
_S(37,  "mkdirat")
_S(38,  "symlinkat")
_S(39,  "linkat")
_S(40,  "msg_ring")
_S(41,  "fsetxattr")
_S(42,  "setxattr")
_S(43,  "fgetxattr")
_S(44,  "getxattr")
_S(46,  "uring_cmd")
_S(48,	"sendmsg_zc")
_S(50,  "waitid")
_S(51,  "futex_wait")
_S(52,  "futex_wake")
_S(53,  "futex_waitv")
_S(54,  "fixed_fd_install")
_S(55,  "ftruncate")
_S(56,  "bind")
_S(57,  "listen")