summaryrefslogtreecommitdiff
path: root/include
diff options
context:
space:
mode:
authorPeter Moody <pmoody@google.com>2011-12-13 16:17:51 -0800
committerAl Viro <viro@zeniv.linux.org.uk>2012-01-17 16:17:02 -0500
commit4a6633ed08af5ba67790b4d1adcdeb8ceb55677e (patch)
tree8b658f732f742d3d3a40f84b39ce4aa42f70d538 /include
parentc9fe685f7a17a0ee8bf3fbe51e40b1c8b8e65896 (diff)
audit: implement all object interfield comparisons
This completes the matrix of interfield comparisons between uid/gid information for the current task and the uid/gid information for inodes. aka I can audit based on differences between the euid of the process and the uid of fs objects. Signed-off-by: Peter Moody <pmoody@google.com> Signed-off-by: Eric Paris <eparis@redhat.com>
Diffstat (limited to 'include')
-rw-r--r--include/linux/audit.h10
1 files changed, 9 insertions, 1 deletions
diff --git a/include/linux/audit.h b/include/linux/audit.h
index fffbc2176ee..67113cb4bc1 100644
--- a/include/linux/audit.h
+++ b/include/linux/audit.h
@@ -185,8 +185,16 @@
/* AUDIT_FIELD_COMPARE rule list */
#define AUDIT_COMPARE_UID_TO_OBJ_UID 1
#define AUDIT_COMPARE_GID_TO_OBJ_GID 2
+#define AUDIT_COMPARE_EUID_TO_OBJ_UID 3
+#define AUDIT_COMPARE_EGID_TO_OBJ_GID 4
+#define AUDIT_COMPARE_AUID_TO_OBJ_UID 5
+#define AUDIT_COMPARE_SUID_TO_OBJ_UID 6
+#define AUDIT_COMPARE_SGID_TO_OBJ_GID 7
+#define AUDIT_COMPARE_FSUID_TO_OBJ_UID 8
+#define AUDIT_COMPARE_FSGID_TO_OBJ_GID 9
+
+#define AUDIT_MAX_FIELD_COMPARE AUDIT_COMPARE_FSGID_TO_OBJ_GID
-#define AUDIT_MAX_FIELD_COMPARE AUDIT_COMPARE_GID_TO_OBJ_GID
/* Rule fields */
/* These are useful when checking the
* task structure at task creation time