[PATCH v2 3/3] audit(userspace): Add compat system call support for AArch64

Will Deacon will.deacon at arm.com
Fri Jan 17 15:05:22 UTC 2014


On Fri, Jan 17, 2014 at 08:15:29AM +0000, AKASHI Takahiro wrote:
> For 32-bit task auditing (-F arch=b32), internally-used machine type will
> be overwritten to MACH_ARM[EB] in order to use a correct system call
> lookup table.
> 
> Signed-off-by: AKASHI Takahiro <takahiro.akashi at linaro.org>
> ---
>  lib/libaudit.c |    6 ++++++
>  1 file changed, 6 insertions(+)
> 
> diff --git a/lib/libaudit.c b/lib/libaudit.c
> index 77b3f9b..df2af2a 100644
> --- a/lib/libaudit.c
> +++ b/lib/libaudit.c
> @@ -1306,6 +1306,12 @@ int audit_rule_fieldpair_data(struct audit_rule_data **rulep, const char *pair,
>  				else if (bits == ~__AUDIT_ARCH_64BIT &&
>  					machine == MACH_S390X)
>  						machine = MACH_S390;
> +				else if (bits == ~__AUDIT_ARCH_64BIT &&
> +					machine == MACH_AARCH64)
> +						machine = MACH_ARM;
> +				else if (bits == ~__AUDIT_ARCH_64BIT &&
> +					machine == MACH_AARCH64EB)
> +						machine = MACH_ARMEB;

Why do you care about MACH_ARMEB? The syscall APIs are identical for either
endianness.

Will




More information about the Linux-audit mailing list