Defined in 1 files as a prototype:
Defined in 2 files as a function:
- security/integrity/integrity.h, line 235 (as a function)
- security/integrity/integrity_audit.c, line 28 (as a function)
Referenced in 9 files:
- security/integrity/evm/evm_main.c
- security/integrity/ima/ima_api.c
- security/integrity/ima/ima_appraise.c
- security/integrity/ima/ima_fs.c
- security/integrity/ima/ima_init.c, line 105
- security/integrity/ima/ima_main.c
- security/integrity/ima/ima_policy.c
- security/integrity/ima/ima_queue.c, line 294
- security/integrity/ima/ima_template_lib.c, line 393
Smatch caller information:
security/integrity/ima/ima_appraise.c ima_appraise_measurement() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1800,1808 |
| PARAM_VALUE | 1 | inode | 4096-ptr_max |
| PARAM_VALUE | 1 | inode->i_sb | 4096-ptr_max |
| PARAM_VALUE | 1 | inode->i_sb->s_cop->inode_info_offs | 1632,1720,1808,2632,2648 |
| PARAM_VALUE | 1 | inode->i_sb->s_iflags | 32-u64max |
| PARAM_VALUE | 2 | fname | 1-ptr_max |
| PARAM_VALUE | 3 | op | 2629437095663284224 |
| PARAM_VALUE | 4 | cause | 8759721569725108224 |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | (-1),255 |
| BUF_SIZE | 2 | fname | (-1),255 |
| BUF_SIZE | 3 | op | 14 |
| BUF_SIZE | 4 | cause | 23 |
| BUF_SIZE | 4 | cause | 23 |
| DATA_SOURCE | 2 | fname | $3 |
| FUZZY_MAX | 0 | audit_msgno | 1808 |
| STR_LEN | 0 | audit_msgno | 13 |
| STR_LEN | 1 | inode | 22 |
| STR_LEN | 4 | cause | 22 |
| BIT_INFO | 0 | audit_msgno | 0x700,0x718 |
| BIT_INFO | 1 | inode->i_sb->s_iflags | 0x20,0xffffffffffffffff |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| HARD_MAX | 0 | audit_msgno | 1808 |
| NOCHECK_CALL | |||
| UNITS | 5 | result | unit_byte |
| LOCK2 | &iint->mutex | ||
| LOCK2 | &inode->i_rwsem | ||
| TYPE_LOCK | (struct ima_iint_cache)->mutex | ||
| TYPE_LOCK | (struct inode)->i_rwsem |
security/integrity/ima/ima_appraise.c ima_appraise_measurement() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1800,1808 |
| PARAM_VALUE | 1 | inode | 4096-ptr_max |
| PARAM_VALUE | 1 | inode->i_sb | 4096-ptr_max |
| PARAM_VALUE | 1 | inode->i_sb->s_cop->inode_info_offs | 1632,1720,1808,2632,2648 |
| PARAM_VALUE | 1 | inode->i_sb->s_iflags | 32-u64max |
| PARAM_VALUE | 2 | fname | 1-ptr_max |
| PARAM_VALUE | 3 | op | 2629437095663284224 |
| PARAM_VALUE | 4 | cause | 4096-ptr_max |
| PARAM_VALUE | 4 | *cause | 0-255 |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | (-1),255 |
| BUF_SIZE | 2 | fname | (-1),255 |
| BUF_SIZE | 3 | op | 14 |
| BUF_SIZE | 4 | cause | (-1),8,13,23,26 |
| BUF_SIZE | 4 | cause | (-1),8,13,23,26 |
| DATA_SOURCE | 2 | fname | $3 |
| FUZZY_MAX | 0 | audit_msgno | 1808 |
| STR_LEN | 0 | audit_msgno | 13 |
| STR_LEN | 1 | inode | (-1),7,12,22,25 |
| STR_LEN | 4 | cause | (-1),7,12,22,25 |
| BIT_INFO | 0 | audit_msgno | 0x700,0x718 |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| HARD_MAX | 0 | audit_msgno | 1808 |
| NOCHECK_CALL | |||
| UNITS | 5 | result | unit_byte |
| LOCK2 | &iint->mutex | ||
| LOCK2 | &inode->i_rwsem | ||
| TYPE_LOCK | (struct ima_iint_cache)->mutex | ||
| TYPE_LOCK | (struct inode)->i_rwsem |
security/integrity/ima/ima_appraise.c validate_hash_algo() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1800 |
| PARAM_VALUE | 3 | op | 3170575030376095744 |
| PARAM_VALUE | 4 | cause | 2556793451549884416,7420280386891993088 |
| PARAM_VALUE | 5 | result | (-13) |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 3 | op | 9 |
| BUF_SIZE | 4 | cause | 22,27 |
| BUF_SIZE | 4 | cause | 22,27 |
| DATA_SOURCE | 2 | fname | r dentry_path |
| STR_LEN | 0 | audit_msgno | 8 |
| STR_LEN | 1 | inode | 21,26 |
| STR_LEN | 4 | cause | 21,26 |
| BIT_INFO | 4 | cause | 0x227a0010022c0000,0x67fbafbb93ffd000 |
| BIT_INFO | 4 | cause | 0x227a0010022c0000,0x67fbafbb93ffd000 |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| NOCHECK_CALL |
security/integrity/ima/ima_main.c ima_file_mprotect() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1800 |
| PARAM_VALUE | 2 | fname | 1-ptr_max |
| PARAM_VALUE | 3 | op | 6012214275366232064 |
| PARAM_VALUE | 4 | cause | 2335278795692576768 |
| PARAM_VALUE | 5 | result | (-1)-0 |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | (-1),255 |
| BUF_SIZE | 2 | fname | (-1),255 |
| BUF_SIZE | 3 | op | 13 |
| BUF_SIZE | 4 | cause | 16 |
| DATA_SOURCE | 2 | fname | r ima_d_path |
| FUZZY_MAX | 5 | result | 0 |
| STR_LEN | 0 | audit_msgno | 12 |
| STR_LEN | 1 | inode | 15 |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| HARD_MAX | 5 | result | 0 |
| NOCHECK_CALL |
security/integrity/ima/ima_main.c mmap_violation_check() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1800 |
| PARAM_VALUE | 2 | fname | 0-ptr_max |
| PARAM_VALUE | 3 | op | 4861385110744465408 |
| PARAM_VALUE | 4 | cause | 978940080276312064 |
| PARAM_VALUE | 5 | result | (-26) |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | (-1),255 |
| BUF_SIZE | 3 | op | 10 |
| BUF_SIZE | 4 | cause | 16 |
| STR_LEN | 0 | audit_msgno | 9 |
| STR_LEN | 1 | inode | 15 |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| NOCHECK_CALL | |||
| LOCK2 | &iint->mutex | ||
| TYPE_LOCK | (struct ima_iint_cache)->mutex |
security/integrity/ima/ima_main.c process_measurement() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1800 |
| PARAM_VALUE | 2 | fname | 1-ptr_max |
| PARAM_VALUE | 2 | *fname | 0-255 |
| PARAM_VALUE | 3 | op | 6012214275366232064 |
| PARAM_VALUE | 4 | cause | 7420280386891993088 |
| PARAM_VALUE | 5 | result | (-13) |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | (-1),255 |
| BUF_SIZE | 2 | fname | (-1),255 |
| BUF_SIZE | 3 | op | 13 |
| BUF_SIZE | 4 | cause | 22 |
| STR_LEN | 0 | audit_msgno | 12 |
| STR_LEN | 1 | inode | 21 |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| NOCHECK_CALL | |||
| LOCK2 | &iint->mutex | ||
| TYPE_LOCK | (struct ima_iint_cache)->mutex |
security/integrity/ima/ima_queue.c ima_add_template_entry() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1804 |
| PARAM_VALUE | 3 | op | 4811409568058585088 |
| PARAM_VALUE | 4 | cause | 739630691129446400,2948114571838840832,4455795857734971392,8324940340898824192 |
| PARAM_VALUE | 5 | result | (-19),(-12),0 |
| PARAM_VALUE | 6 | audit_info | 0-1 |
| BUF_SIZE | 2 | fname | (-1),20,30,64,255-256,1024,2048,4096 |
| BUF_SIZE | 2 | fname | (-1),20,30,64,255-256,1024,2048,4096 |
| BUF_SIZE | 3 | op | 21 |
| BUF_SIZE | 3 | op | 21 |
| BUF_SIZE | 4 | cause | 7,11,23,32 |
| BUF_SIZE | 4 | cause | 7,11,23,32 |
| DATA_SOURCE | 1 | inode | $3 |
| DATA_SOURCE | 2 | fname | $4 |
| DATA_SOURCE | 3 | op | $2 |
| FUZZY_MAX | 6 | audit_info | 1 |
| STR_LEN | 0 | audit_msgno | (-1),6,12 |
| STR_LEN | 1 | inode | (-1),6,12 |
| STR_LEN | 2 | fname | (-1),6,12 |
| STR_LEN | 2 | fname | 6,10,22,31 |
| STR_LEN | 3 | op | (-1),6,12 |
| STR_LEN | 4 | cause | 6,10,22,31 |
| BIT_INFO | 4 | cause | 0x101900000,0x7fffffbdfbff7000 |
| BIT_INFO | 4 | cause | 0x101900000,0x7fffffbdfbff7000 |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| HARD_MAX | 6 | audit_info | 1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 2 | *fname | 0-255 |
| USER_PTR | 2 | fname | |
| HALF_LOCKED2 | &iint->mutex | ||
| HALF_LOCKED2 | &inode->i_rwsem |
security/integrity/evm/evm_main.c evm_inode_set_acl() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1801 |
| PARAM_VALUE | 3 | op | 31091822600728576 |
| PARAM_VALUE | 5 | result | (-1) |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | s32min-(-2),1-s32max |
| BUF_SIZE | 3 | op | 18 |
| STR_LEN | 0 | audit_msgno | 17 |
| TERMINATED | 3 | op | 1 |
| NOCHECK_CALL | |||
| UNITS | 2 | fname | unit_byte |
security/integrity/evm/evm_main.c evm_inode_setattr() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1801 |
| PARAM_VALUE | 3 | op | 31091822600728576 |
| PARAM_VALUE | 5 | result | (-1) |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | s32min-(-2),1-s32max |
| BUF_SIZE | 3 | op | 18 |
| STR_LEN | 0 | audit_msgno | 17 |
| TERMINATED | 3 | op | 1 |
| NOCHECK_CALL | |||
| UNITS | 2 | fname | unit_byte |
security/integrity/evm/evm_main.c evm_protect_xattr() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1801 |
| PARAM_VALUE | 1 | inode->i_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 3 | op | 6439024619140804608 |
| PARAM_VALUE | 5 | result | (-1) |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | s32min-(-2),1-s32max |
| BUF_SIZE | 3 | op | 16 |
| STR_LEN | 0 | audit_msgno | 15 |
| TERMINATED | 3 | op | 1 |
| NOCHECK_CALL | |||
| UNITS | 2 | fname | unit_byte |
security/integrity/evm/evm_main.c evm_protect_xattr() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1801 |
| PARAM_VALUE | 3 | op | 31091822600728576 |
| PARAM_VALUE | 5 | result | (-1) |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | s32min-(-2),1-s32max |
| BUF_SIZE | 3 | op | 18 |
| STR_LEN | 0 | audit_msgno | 17 |
| TERMINATED | 3 | op | 1 |
| NOCHECK_CALL | |||
| UNITS | 2 | fname | unit_byte |
security/integrity/ima/ima_init.c ima_add_boot_aggregate() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1804 |
| PARAM_VALUE | 1 | inode | 0 |
| PARAM_VALUE | 2 | fname | 1386973853826129920 |
| PARAM_VALUE | 3 | op | 7443704528249503744 |
| PARAM_VALUE | 4 | cause | 3315408074291048448,4756609629449129984,6799907915187294208 |
| PARAM_VALUE | 5 | result | s32min-(-1) |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | 20 |
| BUF_SIZE | 2 | fname | 20 |
| BUF_SIZE | 3 | op | 19 |
| BUF_SIZE | 4 | cause | 12,14 |
| BUF_SIZE | 4 | cause | 12,14 |
| STR_LEN | 0 | audit_msgno | 18 |
| STR_LEN | 1 | inode | 11,13 |
| STR_LEN | 4 | cause | 11,13 |
| BIT_INFO | 4 | cause | 0x2020000a0001000,0x7e5eff7bef9ff000 |
| BIT_INFO | 4 | cause | 0x2020000a0001000,0x7e5eff7bef9ff000 |
| BIT_INFO | 5 | result | 0x0,0x7fffffff |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| NOCHECK_CALL |
security/integrity/ima/ima_template_lib.c ima_eventdigest_init() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1800 |
| PARAM_VALUE | 2 | fname | 0-1586993309414600703,1586993309414600705-5900628009905885183,5900628009905885185-u64max |
| PARAM_VALUE | 3 | op | 6012214275366232064 |
| PARAM_VALUE | 4 | cause | 6955733276447539200 |
| PARAM_VALUE | 5 | result | s32min-(-1),1-s32max |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | 11-12,14-15,17-20,255 |
| BUF_SIZE | 3 | op | 13 |
| BUF_SIZE | 4 | cause | 7 |
| DATA_SOURCE | 5 | result | r ima_calc_file_hash |
| STR_LEN | 0 | audit_msgno | 12 |
| STR_LEN | 1 | inode | 6 |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &iint->mutex | ||
| HALF_LOCKED2 | &inode->i_rwsem |
security/integrity/ima/ima_fs.c ima_release_policy() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1802 |
| PARAM_VALUE | 1 | inode | 0 |
| PARAM_VALUE | 2 | fname | 0 |
| PARAM_VALUE | 3 | op | 1140758858227724288 |
| PARAM_VALUE | 4 | cause | 6955733276447539200,8655502656931119104 |
| PARAM_VALUE | 5 | result | 0-1 |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 3 | op | 14 |
| BUF_SIZE | 4 | cause | 7,10 |
| BUF_SIZE | 4 | cause | 7,10 |
| FUZZY_MAX | 5 | result | 1 |
| STR_LEN | 0 | audit_msgno | 13 |
| STR_LEN | 1 | inode | 6,9 |
| STR_LEN | 4 | cause | 6,9 |
| BIT_INFO | 4 | cause | 0x6006808ec2040000,0x789fbfcfd7d54000 |
| BIT_INFO | 4 | cause | 0x6006808ec2040000,0x789fbfcfd7d54000 |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| HARD_MAX | 5 | result | 1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
security/integrity/ima/ima_fs.c ima_write_policy() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1802 |
| PARAM_VALUE | 1 | inode | 0 |
| PARAM_VALUE | 2 | fname | 0 |
| PARAM_VALUE | 3 | op | 1140758858227724288 |
| PARAM_VALUE | 4 | cause | 4846648869268852736 |
| PARAM_VALUE | 5 | result | 1 |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 3 | op | 14 |
| BUF_SIZE | 4 | cause | 23 |
| STR_LEN | 0 | audit_msgno | 13 |
| STR_LEN | 1 | inode | 22 |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| NOCHECK_CALL | |||
| LOCK2 | global &ima_write_mutex |
security/integrity/ima/ima_policy.c ima_measure_loaded_policy() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1804 |
| PARAM_VALUE | 1 | inode | 0 |
| PARAM_VALUE | 2 | fname | 2372347332381790208 |
| PARAM_VALUE | 3 | op | 2362349523783520256 |
| PARAM_VALUE | 4 | cause | 2948114571838840832 |
| PARAM_VALUE | 5 | result | (-12) |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | 18 |
| BUF_SIZE | 2 | fname | 18 |
| BUF_SIZE | 3 | op | 26 |
| BUF_SIZE | 3 | op | 26 |
| BUF_SIZE | 4 | cause | 7 |
| STR_LEN | 0 | audit_msgno | 17 |
| STR_LEN | 1 | inode | 25 |
| STR_LEN | 2 | fname | 17 |
| STR_LEN | 2 | fname | 6 |
| STR_LEN | 3 | op | 25 |
| TERMINATED | 2 | fname | 1 |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | global &ima_write_mutex |
security/integrity/ima/ima_policy.c ima_measure_loaded_policy() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1804 |
| PARAM_VALUE | 1 | inode | 0 |
| PARAM_VALUE | 2 | fname | 2372347332381790208 |
| PARAM_VALUE | 3 | op | 2362349523783520256 |
| PARAM_VALUE | 4 | cause | 3224613689061609472 |
| PARAM_VALUE | 5 | result | (-7) |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | 18 |
| BUF_SIZE | 2 | fname | 18 |
| BUF_SIZE | 3 | op | 26 |
| BUF_SIZE | 3 | op | 26 |
| BUF_SIZE | 4 | cause | 12 |
| STR_LEN | 0 | audit_msgno | 17 |
| STR_LEN | 1 | inode | 25 |
| STR_LEN | 2 | fname | 11 |
| STR_LEN | 2 | fname | 17 |
| STR_LEN | 3 | op | 25 |
| TERMINATED | 2 | fname | 1 |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | global &ima_write_mutex | ||
| LOCK2 | rcu_read |
security/integrity/ima/ima_policy.c ima_measure_loaded_policy() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1804 |
| PARAM_VALUE | 1 | inode | 0 |
| PARAM_VALUE | 2 | fname | 2372347332381790208 |
| PARAM_VALUE | 3 | op | 2362349523783520256 |
| PARAM_VALUE | 4 | cause | 2948114571838840832 |
| PARAM_VALUE | 5 | result | (-12) |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | 18 |
| BUF_SIZE | 2 | fname | 18 |
| BUF_SIZE | 3 | op | 26 |
| BUF_SIZE | 3 | op | 26 |
| BUF_SIZE | 4 | cause | 7 |
| STR_LEN | 0 | audit_msgno | 17 |
| STR_LEN | 1 | inode | 25 |
| STR_LEN | 2 | fname | 17 |
| STR_LEN | 2 | fname | 6 |
| STR_LEN | 3 | op | 25 |
| TERMINATED | 2 | fname | 1 |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | global &ima_write_mutex |
security/integrity/ima/ima_policy.c ima_parse_add_rule() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1802 |
| PARAM_VALUE | 1 | inode | 0 |
| PARAM_VALUE | 2 | fname | 0 |
| PARAM_VALUE | 3 | op | 62340557952532480 |
| PARAM_VALUE | 4 | cause | 7298385545167638528 |
| PARAM_VALUE | 5 | result | (-12) |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 3 | op | 14 |
| BUF_SIZE | 4 | cause | 8 |
| STR_LEN | 0 | audit_msgno | 13 |
| STR_LEN | 1 | inode | 7 |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| NOCHECK_CALL | |||
| LOCK2 | global &ima_write_mutex |
security/integrity/ima/ima_policy.c ima_parse_add_rule() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1802 |
| PARAM_VALUE | 1 | inode | 0 |
| PARAM_VALUE | 2 | fname | 0 |
| PARAM_VALUE | 3 | op | 62340557952532480 |
| PARAM_VALUE | 4 | cause | 6734925435294404608 |
| PARAM_VALUE | 5 | result | s32min-(-1),1-s32max |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 3 | op | 14 |
| BUF_SIZE | 4 | cause | 15 |
| DATA_SOURCE | 5 | result | r ima_parse_rule |
| STR_LEN | 0 | audit_msgno | 13 |
| STR_LEN | 1 | inode | 14 |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| NOCHECK_CALL | |||
| LOCK2 | global &ima_write_mutex |
security/integrity/ima/ima_api.c ima_add_violation() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1804 |
| PARAM_VALUE | 2 | fname | 1-ptr_max |
| PARAM_VALUE | 3 | op | 7509862970711224320 |
| PARAM_VALUE | 4 | cause | 764008393323704320,5282782539332939776 |
| PARAM_VALUE | 5 | result | (-19),(-12),0 |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | (-1),255 |
| BUF_SIZE | 2 | fname | (-1),255 |
| BUF_SIZE | 3 | op | 12 |
| BUF_SIZE | 3 | op | 12 |
| BUF_SIZE | 4 | cause | 7,13 |
| BUF_SIZE | 4 | cause | 7,13 |
| DATA_SOURCE | 2 | fname | $1 |
| DATA_SOURCE | 3 | op | $3 |
| DATA_SOURCE | 4 | cause | $4 |
| STR_LEN | 0 | audit_msgno | 6,12 |
| STR_LEN | 2 | fname | 6,12 |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| NOCHECK_CALL | |||
| LOCK2 | &inode->i_rwsem | ||
| TYPE_LOCK | (struct inode)->i_rwsem |
security/integrity/ima/ima_api.c ima_collect_measurement() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1800 |
| PARAM_VALUE | 3 | op | 6012214275366232064 |
| PARAM_VALUE | 4 | cause | 1350440282787823616,2979124236697939968,6955733276447539200 |
| PARAM_VALUE | 5 | result | s32min-(-1),1-s32max |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | s32min-(-2),1-s32max |
| BUF_SIZE | 3 | op | 13 |
| BUF_SIZE | 4 | cause | 7,17 |
| BUF_SIZE | 4 | cause | 7,17 |
| STR_LEN | 0 | audit_msgno | 12 |
| STR_LEN | 1 | inode | 6,16 |
| STR_LEN | 4 | cause | 6,16 |
| BIT_INFO | 4 | cause | 0x5b80000000000,0x7bfffbffdff77000 |
| BIT_INFO | 4 | cause | 0x5b80000000000,0x7bfffbffdff77000 |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| NOCHECK_CALL | |||
| UNITS | 2 | fname | unit_byte |
| HALF_LOCKED2 | &iint->mutex |
security/integrity/ima/ima_api.c ima_store_measurement() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1804 |
| PARAM_VALUE | 2 | fname | 1-ptr_max |
| PARAM_VALUE | 3 | op | 4811409568058585088 |
| PARAM_VALUE | 4 | cause | 2948114571838840832 |
| PARAM_VALUE | 5 | result | s32min-(-1) |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | (-1),255 |
| BUF_SIZE | 2 | fname | (-1),255 |
| BUF_SIZE | 3 | op | 21 |
| BUF_SIZE | 4 | cause | 7 |
| DATA_SOURCE | 2 | fname | $2 |
| DATA_SOURCE | 5 | result | r ima_alloc_init_template |
| STR_LEN | 0 | audit_msgno | 20 |
| STR_LEN | 1 | inode | 6 |
| BIT_INFO | 5 | result | 0x0,0x7fffffff |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| NOCHECK_CALL | |||
| LOCK2 | &iint->mutex | ||
| TYPE_LOCK | (struct ima_iint_cache)->mutex |
security/integrity/ima/ima_api.c ima_store_template() -> integrity_audit_msg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | audit_msgno | 1804 |
| PARAM_VALUE | 3 | op | 4811409568058585088 |
| PARAM_VALUE | 4 | cause | 3315408074291048448 |
| PARAM_VALUE | 5 | result | s32min-(-1) |
| PARAM_VALUE | 6 | audit_info | 0 |
| BUF_SIZE | 2 | fname | 1 |
| BUF_SIZE | 3 | op | 21 |
| BUF_SIZE | 4 | cause | 14 |
| DATA_SOURCE | 1 | inode | $2 |
| DATA_SOURCE | 5 | result | r ima_calc_field_array_hash |
| STR_LEN | 0 | audit_msgno | 20 |
| STR_LEN | 1 | inode | 13 |
| BIT_INFO | 5 | result | 0x0,0x7fffffff |
| TERMINATED | 3 | op | 1 |
| TERMINATED | 4 | cause | 1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &iint->mutex |