[PATCH v2 3/3] audit(userspace): Add compat system call support for AArch64
Will Deacon
will.deacon at arm.com
Fri Jan 17 15:05:22 UTC 2014
On Fri, Jan 17, 2014 at 08:15:29AM +0000, AKASHI Takahiro wrote:
> For 32-bit task auditing (-F arch=b32), internally-used machine type will
> be overwritten to MACH_ARM[EB] in order to use a correct system call
> lookup table.
>
> Signed-off-by: AKASHI Takahiro <takahiro.akashi at linaro.org>
> ---
> lib/libaudit.c | 6 ++++++
> 1 file changed, 6 insertions(+)
>
> diff --git a/lib/libaudit.c b/lib/libaudit.c
> index 77b3f9b..df2af2a 100644
> --- a/lib/libaudit.c
> +++ b/lib/libaudit.c
> @@ -1306,6 +1306,12 @@ int audit_rule_fieldpair_data(struct audit_rule_data **rulep, const char *pair,
> else if (bits == ~__AUDIT_ARCH_64BIT &&
> machine == MACH_S390X)
> machine = MACH_S390;
> + else if (bits == ~__AUDIT_ARCH_64BIT &&
> + machine == MACH_AARCH64)
> + machine = MACH_ARM;
> + else if (bits == ~__AUDIT_ARCH_64BIT &&
> + machine == MACH_AARCH64EB)
> + machine = MACH_ARMEB;
Why do you care about MACH_ARMEB? The syscall APIs are identical for either
endianness.
Will
More information about the Linux-audit
mailing list