Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753039AbbHETin (ORCPT ); Wed, 5 Aug 2015 15:38:43 -0400 Received: from mx1.redhat.com ([209.132.183.28]:53604 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751161AbbHETim (ORCPT ); Wed, 5 Aug 2015 15:38:42 -0400 Date: Wed, 5 Aug 2015 15:38:38 -0400 From: Richard Guy Briggs To: William Roberts Cc: linux-audit@redhat.com, linux-kernel@vger.kernel.org Subject: Re: [PATCH V4 (was V6)] audit: use macros for unset inode and device values Message-ID: <20150805193838.GK32407@madcap2.tricolour.ca> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 5309 Lines: 142 On 15/08/05, William Roberts wrote: > On Aug 1, 2015 12:44 PM, "Richard Guy Briggs" wrote: > > > > Signed-off-by: Richard Guy Briggs > > --- > > include/uapi/linux/audit.h | 2 ++ > > kernel/audit.c | 2 +- > > kernel/audit_watch.c | 8 ++++---- > > kernel/auditsc.c | 6 +++--- > > 4 files changed, 10 insertions(+), 8 deletions(-) > > > > diff --git a/include/uapi/linux/audit.h b/include/uapi/linux/audit.h > > index d3475e1..971df22 100644 > > --- a/include/uapi/linux/audit.h > > +++ b/include/uapi/linux/audit.h > > @@ -440,6 +440,8 @@ struct audit_tty_status { > > }; > > > > #define AUDIT_UID_UNSET (unsigned int)-1 > > +#define AUDIT_INO_UNSET (unsigned long)-1 > > +#define AUDIT_DEV_UNSET (unsigned)-1 > > Why unsigned int in one but unsigned in the other? It was based on one of the instances it was originally replacing (I can't find it now). It could be dev_t if it was moved out of uapi as Paul preferred, but I prefer unsigned int now that you point it out. > > /* audit_rule_data supports filter rules with both integer and string > > * fields. It corresponds with AUDIT_ADD_RULE, AUDIT_DEL_RULE and > > diff --git a/kernel/audit.c b/kernel/audit.c > > index 1c13e42..d546003 100644 > > --- a/kernel/audit.c > > +++ b/kernel/audit.c > > @@ -1761,7 +1761,7 @@ void audit_log_name(struct audit_context *context, > struct audit_names *n, > > } else > > audit_log_format(ab, " name=(null)"); > > > > - if (n->ino != (unsigned long)-1) > > + if (n->ino != AUDIT_INO_UNSET) > > audit_log_format(ab, " inode=%lu" > > " dev=%02x:%02x mode=%#ho" > > " ouid=%u ogid=%u rdev=%02x:%02x", > > diff --git a/kernel/audit_watch.c b/kernel/audit_watch.c > > index 8f123d7..c668bfc 100644 > > --- a/kernel/audit_watch.c > > +++ b/kernel/audit_watch.c > > @@ -138,7 +138,7 @@ char *audit_watch_path(struct audit_watch *watch) > > > > int audit_watch_compare(struct audit_watch *watch, unsigned long ino, > dev_t dev) > > { > > - return (watch->ino != (unsigned long)-1) && > > + return (watch->ino != AUDIT_INO_UNSET) && > > (watch->ino == ino) && > > (watch->dev == dev); > > } > > @@ -179,8 +179,8 @@ static struct audit_watch *audit_init_watch(char > *path) > > INIT_LIST_HEAD(&watch->rules); > > atomic_set(&watch->count, 1); > > watch->path = path; > > - watch->dev = (dev_t)-1; > > - watch->ino = (unsigned long)-1; > > + watch->dev = AUDIT_DEV_UNSET; > > + watch->ino = AUDIT_INO_UNSET; > > > > return watch; > > } > > @@ -493,7 +493,7 @@ static int audit_watch_handle_event(struct > fsnotify_group *group, > > if (mask & (FS_CREATE|FS_MOVED_TO) && inode) > > audit_update_watch(parent, dname, inode->i_sb->s_dev, > inode->i_ino, 0); > > else if (mask & (FS_DELETE|FS_MOVED_FROM)) > > - audit_update_watch(parent, dname, (dev_t)-1, (unsigned > long)-1, 1); > > + audit_update_watch(parent, dname, AUDIT_DEV_UNSET, > AUDIT_INO_UNSET, 1); > > else if (mask & (FS_DELETE_SELF|FS_UNMOUNT|FS_MOVE_SELF)) > > audit_remove_parent_watches(parent); > > > > diff --git a/kernel/auditsc.c b/kernel/auditsc.c > > index 9fb9d1c..701ea5c 100644 > > --- a/kernel/auditsc.c > > +++ b/kernel/auditsc.c > > @@ -180,7 +180,7 @@ static int audit_match_filetype(struct audit_context > *ctx, int val) > > return 0; > > > > list_for_each_entry(n, &ctx->names_list, list) { > > - if ((n->ino != -1) && > > + if ((n->ino != AUDIT_INO_UNSET) && > > ((n->mode & S_IFMT) == mode)) > > return 1; > > } > > @@ -1683,7 +1683,7 @@ static struct audit_names *audit_alloc_name(struct > audit_context *context, > > aname->should_free = true; > > } > > > > - aname->ino = (unsigned long)-1; > > + aname->ino = AUDIT_INO_UNSET; > > aname->type = type; > > list_add_tail(&aname->list, &context->names_list); > > > > @@ -1925,7 +1925,7 @@ void __audit_inode_child(const struct inode *parent, > > if (inode) > > audit_copy_inode(found_child, dentry, inode); > > else > > - found_child->ino = (unsigned long)-1; > > + found_child->ino = AUDIT_INO_UNSET; > > } > > EXPORT_SYMBOL_GPL(__audit_inode_child); > > > > -- > > 1.7.1 > > > > -- > > Linux-audit mailing list > > Linux-audit@redhat.com > > https://www.redhat.com/mailman/listinfo/linux-audit > -- > Linux-audit mailing list > Linux-audit@redhat.com > https://www.redhat.com/mailman/listinfo/linux-audit - RGB -- Richard Guy Briggs Senior Software Engineer, Kernel Security, AMER ENG Base Operating Systems, Red Hat Remote, Ottawa, Canada Voice: +1.647.777.2635, Internal: (81) 32635, Alt: +1.613.693.0684x3545 -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/