Documented in 1 files:
Defined in 1 files as a prototype:
Defined in 2 files as a function:
Referenced in 26 files:
- drivers/md/dm-audit.c
- drivers/tty/tty_audit.c, line 84
- kernel/audit.c
- kernel/audit_fsnotify.c, line 141
- kernel/audit_tree.c, line 541
- kernel/audit_watch.c, line 241
- kernel/auditfilter.c, line 1125
- kernel/auditsc.c
- kernel/bpf/syscall.c, line 2389
- net/ipv4/cipso_ipv4.c
- net/ipv6/calipso.c
- net/netfilter/nft_log.c, line 45
- net/netfilter/xt_AUDIT.c, line 46
- net/netlabel/netlabel_domainhash.c
- net/netlabel/netlabel_unlabeled.c
- net/xfrm/xfrm_policy.c
- net/xfrm/xfrm_state.c
- security/integrity/evm/evm_secfs.c
- security/integrity/ima/ima_api.c, line 428
- security/integrity/ima/ima_policy.c, line 1961
- security/integrity/integrity_audit.c, line 68
- security/ipe/audit.c
- security/landlock/audit.c
- security/lsm_audit.c, line 456
- security/selinux/hooks.c
- security/selinux/ss/services.c
Smatch caller information:
net/netfilter/nft_log.c nft_log_eval_audit() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 0 |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| NOCHECK_CALL |
net/xfrm/xfrm_state.c xfrm_audit_state_add() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner_cpu | 4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ab->skb_list.qlen | 0-4294967295 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->sk->sk_callback_lock.owner | (-4611686018427387904)-4611686018427387903 |
| DATA_SOURCE | 0 | ab | r xfrm_audit_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &net->xfrm.xfrm_cfg_mutex |
net/xfrm/xfrm_state.c xfrm_audit_state_delete() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner_cpu | 4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ab->skb_list.qlen | 0-4294967295 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->sk->sk_callback_lock.owner | (-4611686018427387904)-4611686018427387903 |
| DATA_SOURCE | 0 | ab | r xfrm_audit_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &net->xfrm.xfrm_cfg_mutex | ||
| HALF_LOCKED2 | &net->xfrm.xfrm_state_lock | ||
| HALF_LOCKED2 | &x->lock | ||
| HALF_LOCKED2 | bh |
net/xfrm/xfrm_state.c xfrm_audit_state_icvfail() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r xfrm_audit_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &x->lock |
net/xfrm/xfrm_state.c xfrm_audit_state_notfound() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r xfrm_audit_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
net/xfrm/xfrm_state.c xfrm_audit_state_notfound_simple() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r xfrm_audit_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
net/xfrm/xfrm_state.c xfrm_audit_state_replay() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r xfrm_audit_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | &x->lock | ||
| TYPE_LOCK | (struct xfrm_state)->lock |
net/xfrm/xfrm_state.c xfrm_audit_state_replay_overflow() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r xfrm_audit_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | &x->lock | ||
| LOCK2 | bh | ||
| TYPE_LOCK | (struct xfrm_state)->lock |
net/netlabel/netlabel_domainhash.c netlbl_domhsh_audit_add() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r netlbl_audit_start_common |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | global &netlbl_domhsh_lock | ||
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | global &smk_cipso_doi_lock |
net/netlabel/netlabel_domainhash.c netlbl_domhsh_remove_entry() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r netlbl_audit_start_common |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | rcu_read |
kernel/audit_fsnotify.c audit_mark_log_rule_change() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3136 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| NOCHECK_CALL |
kernel/bpf/syscall.c bpf_audit_prog() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | s64min-(-4096),0,4096-s64max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c __audit_log_nfcfg() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080,3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c audit_core_dumps() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner_cpu | 4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ab->skb_list.qlen | 0-4294967295 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->sk->sk_callback_lock.owner | (-4611686018427387904)-4611686018427387903 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c audit_log_execve_info() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c audit_log_exit() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0-1 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0-1 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner_cpu | 4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ab->skb_list.qlen | 0-4294967295 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->sk->sk_callback_lock.owner | (-4611686018427387904)-4611686018427387903 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c audit_log_exit() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c audit_log_exit() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c audit_log_exit() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c audit_log_exit() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0-1 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0-1 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c audit_log_exit() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c audit_log_name() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c audit_log_pid_context() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c audit_log_proctitle() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0-1 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0-1 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c audit_log_time() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c audit_log_time() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c audit_log_uring() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0-1 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0-1 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c audit_seccomp() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner_cpu | 4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ab->skb_list.qlen | 0-4294967295 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->sk->sk_callback_lock.owner | (-4611686018427387904)-4611686018427387903 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c audit_seccomp_actions_logged() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &pool->lock |
kernel/auditsc.c show_special() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditsc.c show_special() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 0,4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
net/ipv4/cipso_ipv4.c cipso_v4_doi_add() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0-1 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r netlbl_audit_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | global &smk_cipso_doi_lock |
net/ipv4/cipso_ipv4.c cipso_v4_doi_remove() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0-1 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r netlbl_audit_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | global &smk_cipso_doi_lock |
drivers/tty/tty_audit.c tty_audit_log() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/audit.c audit_log() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 0,4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->ctx->prio | 1-u64max |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080,3264 |
| PARAM_VALUE | 0 | ab->skb | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ab->skb_list.next | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb_list.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb_list.prev->next->next | 4096-ptr_max |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| STR_LEN | 0 | ab->ctx | 32,40,55,58,74,82,86,100 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | global &selinux_state.policy_mutex | ||
| HALF_LOCKED2 | rcu_read |
kernel/audit.c audit_log_config_change() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 0,4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->ctx->prio | 1-u64max |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ab->skb_list.next | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb_list.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb_list.prev->next->next | 4096-ptr_max |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | global &audit_cmd_mutex.lock |
kernel/audit.c audit_log_feature_change() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 0,4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->ctx->prio | 1-u64max |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.quarantine.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_rcu.func | 1-u64max |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ab->skb_list.prev->next->next | 4096-ptr_max |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | global &audit_cmd_mutex.lock | ||
| HALF_LOCKED2 | global &hwsim_phys_lock | ||
| HALF_LOCKED2 | global &rtnl_mutex | ||
| HALF_LOCKED2 | global &rx_queue_mutex | ||
| HALF_LOCKED2 | rcu_read |
kernel/audit.c audit_log_multicast() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 0,4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->ctx->prio | 1-u64max |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ab->skb_list.next | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb_list.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb_list.prev->next->next | 4096-ptr_max |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/audit.c audit_log_path_denied() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 0,4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->ctx->prio | 1-u64max |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.quarantine.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_rcu.func | 1-u64max |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ab->skb_list.prev->next->next | 4096-ptr_max |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/audit.c audit_log_set_loginuid() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 0,4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->ctx->prio | 1-u64max |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ab->skb_list.next | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb_list.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb_list.prev->next->next | 4096-ptr_max |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| NOCHECK_CALL |
kernel/audit.c audit_receive_msg() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 0,4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0-1 |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0-1 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner_cpu | 4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| PARAM_VALUE | 0 | *ab->skb->sk->sk_callback_lock.owner | (-4611686018427387904)-4611686018427387903 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | *ab->skb->data | 0-255 |
| LOCK2 | global &audit_cmd_mutex.lock | ||
| HALF_LOCKED2 | &dev->ethtool->rss_lock | ||
| HALF_LOCKED2 | global &hwsim_phys_lock | ||
| HALF_LOCKED2 | global &rtnl_mutex | ||
| HALF_LOCKED2 | global &rx_queue_mutex | ||
| HALF_LOCKED2 | rcu_read |
kernel/audit.c audit_receive_msg() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 0,4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner_cpu | 4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | global &audit_cmd_mutex.lock | ||
| HALF_LOCKED2 | &dev->ethtool->rss_lock | ||
| HALF_LOCKED2 | global &hwsim_phys_lock | ||
| HALF_LOCKED2 | global &rtnl_mutex | ||
| HALF_LOCKED2 | global &rx_queue_mutex | ||
| HALF_LOCKED2 | rcu_read |
kernel/audit.c audit_receive_msg() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 0,4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner_cpu | 4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | global &audit_cmd_mutex.lock | ||
| HALF_LOCKED2 | &dev->ethtool->rss_lock | ||
| HALF_LOCKED2 | global &hwsim_phys_lock | ||
| HALF_LOCKED2 | global &rtnl_mutex | ||
| HALF_LOCKED2 | global &rx_queue_mutex | ||
| HALF_LOCKED2 | rcu_read |
kernel/audit.c audit_receive_msg() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 0,4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner_cpu | 4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | global &audit_cmd_mutex.lock | ||
| HALF_LOCKED2 | &dev->ethtool->rss_lock | ||
| HALF_LOCKED2 | global &hwsim_phys_lock | ||
| HALF_LOCKED2 | global &rtnl_mutex | ||
| HALF_LOCKED2 | global &rx_queue_mutex | ||
| HALF_LOCKED2 | rcu_read |
kernel/audit.c audit_receive_msg() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 0,4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner_cpu | 4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | global &audit_cmd_mutex.lock | ||
| HALF_LOCKED2 | &dev->ethtool->rss_lock | ||
| HALF_LOCKED2 | global &hwsim_phys_lock | ||
| HALF_LOCKED2 | global &rtnl_mutex | ||
| HALF_LOCKED2 | global &rx_queue_mutex | ||
| HALF_LOCKED2 | rcu_read |
security/integrity/integrity_audit.c integrity_audit_message() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/auditfilter.c audit_log_rule_change() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | global &audit_cmd_mutex.lock | ||
| HALF_LOCKED2 | global &hwsim_phys_lock | ||
| HALF_LOCKED2 | global &rtnl_mutex | ||
| HALF_LOCKED2 | global &rx_queue_mutex | ||
| HALF_LOCKED2 | rcu_read |
net/netlabel/netlabel_unlabeled.c netlbl_unlabel_acceptflg_set() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r netlbl_audit_start_common |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
net/netlabel/netlabel_unlabeled.c netlbl_unlhsh_add() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r netlbl_audit_start_common |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | global &smk_net4addr_lock |
net/netlabel/netlabel_unlabeled.c netlbl_unlhsh_remove_addr4() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r netlbl_audit_start_common |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | global &smk_net4addr_lock |
net/netlabel/netlabel_unlabeled.c netlbl_unlhsh_remove_addr6() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r netlbl_audit_start_common |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | global &smk_net4addr_lock |
security/selinux/ss/services.c compute_sid_handle_invalid_context() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | rcu_read |
security/selinux/ss/services.c security_dump_masked_av() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | rcu_read |
security/selinux/ss/services.c security_sid_mls_copy() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 0,4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0-1 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0-1 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | rcu_read |
security/lsm_audit.c common_lsm_audit() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 10272 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0-1 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0-1 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
security/integrity/evm/evm_secfs.c evm_write_xattrs() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 0,4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| CAPABLE | 0 | 21 | |
| NOCHECK_CALL |
security/integrity/evm/evm_secfs.c evm_write_xattrs() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 0,4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| CAPABLE | 0 | 21 | |
| NOCHECK_CALL |
kernel/audit_watch.c audit_watch_log_rule_change() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3136 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| NOCHECK_CALL | |||
| LOCK2 | global &audit_filter_mutex |
security/landlock/audit.c landlock_audit_denial() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 10272 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0-1 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0-1 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| NOCHECK_CALL |
security/landlock/audit.c landlock_audit_free_domain() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| NOCHECK_CALL |
security/landlock/audit.c log_domain() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 10272 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| NOCHECK_CALL | |||
| HALF_LOCKED2 | rcu_read |
net/ipv6/calipso.c calipso_doi_add() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0-1 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r netlbl_audit_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
net/ipv6/calipso.c calipso_doi_remove() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0-1 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r netlbl_audit_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/audit_tree.c audit_tree_log_remove_rule() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | s64min-(-4096),0,4096-s64max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | global &audit_filter_mutex | ||
| HALF_LOCKED2 | global &audit_cmd_mutex.lock |
drivers/md/dm-audit.c dm_audit_log_bio() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r dm_audit_log_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
drivers/md/dm-audit.c dm_audit_log_ti() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r dm_audit_log_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
net/xfrm/xfrm_policy.c xfrm_audit_policy_add() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner_cpu | 4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ab->skb_list.qlen | 0-4294967295 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->sk->sk_callback_lock.owner | (-4611686018427387904)-4611686018427387903 |
| DATA_SOURCE | 0 | ab | r xfrm_audit_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &net->xfrm.xfrm_cfg_mutex |
net/xfrm/xfrm_policy.c xfrm_audit_policy_delete() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner_cpu | 4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ab->skb_list.qlen | 0-4294967295 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->sk->sk_callback_lock.owner | (-4611686018427387904)-4611686018427387903 |
| DATA_SOURCE | 0 | ab | r xfrm_audit_start |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &net->xfrm.xfrm_cfg_mutex | ||
| HALF_LOCKED2 | &net->xfrm.xfrm_policy_lock | ||
| HALF_LOCKED2 | bh |
security/integrity/ima/ima_api.c ima_audit_measurement() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | ab->skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.owner_cpu | 4294967295 |
| PARAM_VALUE | 0 | ab->skb->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ab->skb_list.qlen | 0-4294967295 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->sk->sk_callback_lock.owner | (-4611686018427387904)-4611686018427387903 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| NOCHECK_CALL | |||
| LOCK2 | &iint->mutex | ||
| TYPE_LOCK | (struct ima_iint_cache)->mutex |
security/ipe/audit.c ipe_audit_enforce() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| NOCHECK_CALL |
security/ipe/audit.c ipe_audit_match() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 10272 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| NOCHECK_CALL | |||
| LOCK2 | rcu_read |
security/ipe/audit.c ipe_audit_policy_activation() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| NOCHECK_CALL | |||
| LOCK2 | &root->i_rwsem | ||
| HALF_LOCKED2 | global &ipe_policy_lock | ||
| TYPE_LOCK | (struct inode)->i_rwsem |
security/ipe/audit.c ipe_audit_policy_load() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 3264 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &root->i_rwsem |
security/selinux/hooks.c selinux_inode_setxattr() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0-1 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0-1 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| NOCHECK_CALL |
security/selinux/hooks.c selinux_lsm_setattr() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0-1 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0-1 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| NOCHECK_CALL |
net/netfilter/xt_AUDIT.c audit_tg() -> audit_log_end()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ab | 4096-ptr_max |
| PARAM_VALUE | 0 | ab->ctx | 0 |
| PARAM_VALUE | 0 | ab->ctx->current_state | 2 |
| PARAM_VALUE | 0 | ab->gfp_mask | 2080 |
| PARAM_VALUE | 0 | ab->skb->cloned | 0-1 |
| PARAM_VALUE | 0 | ab->skb->csum_start | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->data_len | 0 |
| PARAM_VALUE | 0 | ab->skb->end | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->hdr_len | 0 |
| PARAM_VALUE | 0 | ab->skb->head_frag | 0 |
| PARAM_VALUE | 0 | ab->skb->inner_mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->inner_transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->len | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->mac_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->network_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->nohdr | 0 |
| PARAM_VALUE | 0 | ab->skb->pfmemalloc | 0-1 |
| PARAM_VALUE | 0 | ab->skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | ab->skb->tail | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->transport_header | 0-u16max |
| PARAM_VALUE | 0 | ab->skb->truesize | 0-4294967295 |
| PARAM_VALUE | 0 | ab->skb->unreadable | 0-1 |
| PARAM_VALUE | 0 | ab->skb_list.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ab->skb->head | 0-255 |
| DATA_SOURCE | 0 | ab | r audit_log_start |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &table->lock | ||
| HALF_LOCKED2 | bh |