Files
Ricardo Robaina c0d73c0938 audit: add missing syscalls to PERM class tables
Add missing file metadata syscalls to the audit PERM class tables,
addressing gaps where certain file operations were not properly
classified for audit rule matching.

Changes:
- audit_change_attr.h: Add file_setattr

- audit_read.h: Add quotactl_fd, file_getattr, stat, stat64, lstat,
  lstat64, fstat, fstat64, newfstatat, fstatat64, and statx

- audit_write.h: Add quotactl_fd

Architecture-specific and conditionally-compiled syscalls are guarded
with #ifdef.

Signed-off-by: Steve Grubb <sgrubb@redhat.com>
Signed-off-by: Ricardo Robaina <rrobaina@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
2026-06-30 15:58:31 -04:00

52 lines
771 B
C

/* SPDX-License-Identifier: GPL-2.0 */
#ifdef __NR_readlink
__NR_readlink,
#endif
__NR_quotactl,
#ifdef __NR_quotactl_fd
__NR_quotactl_fd,
#endif
__NR_listxattr,
#ifdef __NR_listxattrat
__NR_listxattrat,
#endif
__NR_llistxattr,
__NR_flistxattr,
__NR_getxattr,
#ifdef __NR_getxattrat
__NR_getxattrat,
#endif
__NR_lgetxattr,
__NR_fgetxattr,
#ifdef __NR_readlinkat
__NR_readlinkat,
#endif
#ifdef __NR_file_getattr
__NR_file_getattr,
#endif
#ifdef __NR_stat
__NR_stat,
#endif
#ifdef __NR_stat64
__NR_stat64,
#endif
#ifdef __NR_lstat
__NR_lstat,
#endif
#ifdef __NR_lstat64
__NR_lstat64,
#endif
#ifdef __NR_fstat
__NR_fstat,
#endif
#ifdef __NR_fstat64
__NR_fstat64,
#endif
#ifdef __NR_newfstatat
__NR_newfstatat,
#endif
#ifdef __NR_fstatat64
__NR_fstatat64,
#endif
__NR_statx,